



Reviewed for declassification in accordance with 

Executive Order 1206S on 2 ncX iqKo .• 

(Date) 

Present classification and special ha n dling requircm e 

( re f er to automated Depository Index System) 


U - UNCLASSIFIED 
C = CONFIDENTIAL 
S = SECRET 
(rrX TOP SECRET 


0 

X 


For Official Use Only 
Special Intelligence 
£' 2 ’)= SI Codeword 
T5 - SNCP 

4 = PW 

5 = SAO 

6 = PA Information 

7 * FOIA Exemption 


Reason for extension of classification (i f applicable - )^ 

Foreign Government Information 
Intelligence sources, methods, activities 
Cryptographic information 
Foreign Relations/Activities 
Scientific/Technological Material 
Military Plans, Weapons, Operations 



AUTHORITY 




Next scheduled review date ; OOT~ 


cr£- Co-adt ' 3 & 7 lCj 40 - i.9 ^5 


HISPCKTf 

Of' 


COfcST HOARD UNIT #387 

I no - l c /45 


Copy P l - Qp-jQ-6, 

11 2. - Army 

_!! 3- British 

" 4~ CftPT.F.E? 0L . L i n 

5 * Op.ao-3-uu 


a 


OUTLINE 


Fo r*?»orJ 

FAHT r . Rand-Opera tad Systens 


A. iferly Systems 

1. Xn t r oduc t cry 
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3. Simple Substitution 

1. Monoalphabeti c Substitution 

a, u-A Hamburg-2ngland 

b. U-kL yadrid-Cape S part el 

?* Pclyalpbabetic Substitution - Periodic 

a. 3-1 Hamburg— Rio de Janeiro 

b. 6—4 Shanghai— Canton 

Nonperiodic Substitution: Running Key 


1. 

2 . 

3. 

A* 


3-0 Hamburg-Valparaiso 
A-F Hamburg-Li sbon 
3— J Hamburg-South America 
5-3 Hamburg-lbe Crimea 


Single Transposit ion* Columnar 
a. Hamburg Center 


1. 

2-2 

Hamburg-:>w York 

?. 

3-C 

Ha.Tburg-Valparaiso 

3. 

3-A 

Hamb’irg-Rl o de Janeiro 

iu 3-3 

Hamburg-ftio de Janeiro 


3-D 

uemany-Hio de Janeiro 

6, 

3-E 

o-^-j^n-Rio de Janeiro 

7. 

5— C 

Haaburg-Anka ra 


d-I 

Hamburg-Bordsaux 


fc-fl 

Hand lrg-UnkmTi 


1. u-O 

2. U—C 


Li s bon— Pore i jue s e Guinea 

Lisbon-Lourenoc l&i-yaes 


r. Stuttjar t Cer.ter 

1 . i|_c Stuttgart-Libya 

32 Single r-a reposition: Coabs 
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2. 3-w Hamburg— Sao Paulo 
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Ja 

nowsJci 

Method 

1. 

ii-a 

Sarabur g-Spa i n 

?. 

Ij-L 
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i 

^ • 

A-P 

Hanbii rg-Madr id 

L» 

ii-F 

Hanburg-Lisbon 

5* 

a-?. 

Haaburg-7igo 

6. 

ji-; 
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7. 

a-I 

Haraburg-3ordeaux 


Double Transposition 
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7 '■ Q 
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co*-pl etc crib 


partial crib. 
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1. 

2 . 

3 . 


History 

Solution 
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D. 


Enigma t Wheel Wiring Unknown 


1 . 

2 . 


3. 


Single Turnover. MA.N -I1DA— NDft 
.'Multiple Turnover Green Machine 
a« History 

b, Solution 

c. Recovery of Wheel wiring 
Red Machine 

a « History 

b. Solution 

c. Recovery of Wheel wiring for Wheels 
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3 • J'ultiple Turnover Wheels. 4—0 Berlin— Madrid 
2 • Stacker, 4—1 Harabur ^-Bordeaux 


Chart of* Hamburg Center Networks 
Chart of Berlin Center Networks 


FORrT.VORD 


The Coast Guard Cryptanalytic Unit vac establis:»ed in 193 ' - s 
the purpose of* solving mess ages passing be tiveen groups of 
and other crininals violating statutes enforced by law crL ~° roe b,- 0 
agencies of* the Treasury Department. In monitcring illegal tors 

netrrorlcs during the prohibition era (1927— 193U; Coast Giaar potions* 
becane proficient in recognizing and following unauthorized sxa 
After the outbreak of the TYar in Europe in September, 1939» _ 

Coast Guard continued its ry^nitoring activities for the P 01 !? 050 ^ 

detecting possible unneutral conmini cations affecting shlppluS P p w 
the novenente of vessels of belligerent nations or any connnun-ca- 
indicating violation of any of the neutrality laws then enforce a 
the Treasury Department. 

In the course of the latter monitoring activities Coast Guard 
mo n itors repeatedly submitted intercepts from stations whose op©f' 
ting procedures and characteristics were in many respects similar 
to those so frequently heard on the air during the smuggling era. 

TT'e solution of some of these messages revealed that the stations 
whose transmissions were being copied were engaged in espionage 
operations* 

The Coast Guard continued the interception and solution of tins 
new type of traffic, forwarding solutions to the interested United 
States government agencies, including the Federal Bureau of Investi- 
gation. Following this, a number of requests were received frc*a 
the Federal Bureau of Investigation for assistance in solution of 
suspicious messages which proved to be of the same origin. 

On 1 November, 19hl, the Coast Guard was transferred from the 
'Zlreasriry Department to the Havy. A few months thereafter the Coast 
Guard Cryptanalytic Unit started operating as a part of 0p-2C-G. 

On 30 June, 1 9h2, by an agreement entered into by the Amy, 
Navy and the Federal Bureau of Investigation, the arrangement which 
had been in effect more or less unofficially by virtue of mutual 
consent, was male official and the clandestine field, outside the 
ifestem .'.'enispbere, was assigned to the Coast Guard and within the 
Fes tern Hemisphere to the Coast Guard and the Federal Bureau of 
Investigation jointly* 




^r*l -Hi* fe 

Lw b a r n 0 


IRQ 

UL 



&& •• 


procedures S, we th ® f *? 1 that no historical records of c^Cptf ^^ 0 
?unctdo^ ^ maintained during the years the Coast Cuard Cn±t 

hlstor-' ttI t C ' J - andestine field, and since, therefore, "thus ^ 

in oi* ^ J* 1 ® onl5r docune nt of record, the descriptions he 

the solutions are ranch more detailed than is warranted > 

nr .~+"' pl < :^'^ y of the systems discussed. Such portions are there 
1 xnterest to the historian rather than to the cryptanalyst. 



PART I. HAND— OPERA T ED SYSTEMS 


A. EARLY SYSTEMS 

1. INTRODUCTORY _ 

„ t ounr'l monit° r 

Following the outbreak of war in Europe, Coas -j 
were directed to cover commercial transmi ssions passin^ 

North and South America. 

Numerous cases using enciphered commercial code Gen- 

emanating from Axis dominated commercial firms in Mexico 
tral and South America. 

After the entry of the United States into th9 war, and 
breaking of diplomatic relations with the Axis by most of 
tral and South American countries, a tight censorship caused 
cessation of practically all such traffic. 

2. CODS SYSTEMS 

a. ENCIPHERED COMMERCIAL CODE 

The most significant exchange of messages in this category 
became known to this office as the OPALU messages. 

Between July, 19iil and April, 19U2, traffic passing between 
Hamburg, Berlin and Mexico used the Rudolph Mosse Code with the 
letters of the group transposed and a substitution on the last 
p ® rs 0 group. The following addresses were used: 

to Mexico and Suda-neriat, Mexico; and. from 

dudamvorst, Berlin, Suda™,ro, Berlin, 

the .J™i ndi0 ?h“ r *“?-■ usuall y as the first group of 

the message. The substitution alphabet for the l a «t 

of the group was as follows: ' 6 iast t 0 lett ers 


Ciphers 

Plain: 


abcdefghijklmnop 

UCDBAGHFONMKJL 


QRSTUVWX 
etqvwryxz 


3 h 5 1 2 


Y Z 
SIP 


The transposition key was: 


Examples 

Message t OPALU SOHEP EX SHU OLICV EOELM, etc. 

(a) Transpositions SOHEP H“^PSO 

EXBHU — EHUEX 
OLICV — ICVOL 
EGEI.M — ELMBG 

(b) Substitutions HEPS 0 — HEPWE 

EHUEX — EHUAS 
ICVOL — ICV Eft 
JSLMEO — ELMAH 


(c) Decodes HSPtfE — Business manager 

EHUAS — German 

JCVEK — Gnamber of Commerce 

ELMAH — Colon 

In August, 19U1 traffic from S0LING5N, Nauen to BOKEB, Mexico 
used the .Rudolph Mosse Code with a subtractor of seven. 


Messages originating in Mexico using the cable address MllfcNCH 
LfPO, Hamburg ^in 19hl, employed a mixed arrangement, within the 
messages of the Rudolph Mosse and Peterson Codes. 


Other cable communications employed Acme, Peterson, Mosse or 
Alpha Codes, either in combination with each other, or with simple 
forms of encipherment. 


b. DICTIONARY CODE onmerd** 1 

Traffic on this circuit was °n 1 

’/EXT CO-WAIT EN circuit and the first m 
January, 1540. 

as a separator. By anagramming these 11 lotte s tne 
was derived. The key was then* 

DU RCHT'ALK?N 
1234567390- 

For example, a message sent as 

UHffiT? DIDAI NDRND WCNCK UTHLM D!RAN CHNDR UNDSN, etc. 

would become 

255-33 178-25 164-49 358-1 37-45 132-10, etc. 


It was assumed that these figures represented page and 
line numbers of a dictionary, oossibly a German-Rpanish dictionary* 
and from the range of page and number of wards per page, was 
considered likely to be a small or pocket-size book. 


After several messages had been intercepted and converted to 
figures, it was noted that some combinations of figures occurred 
mare frequently than others. From this it was surmised that thebe 
combinations represented either numerals or letters of the alphabet. 


The code groups 1-1, 132-10, 343 - 2 , 65 - 12 , 575-2 and 521-2 
appeared with greater frequency than any other groups. These 
groups were underlined wherever they appeared in the messages 
available, in an attempt to bracket and identify other letter 
equivalents and thus isolate sections of spelling. 


Several messages sent during the e rly oart of 1941 had the 
follow ng ending which seemed to be sane sort o r signature: 


65-12 375-2 132-13 321-2 132-1° 3a3_2 

Another contained the following 

65-12 132-10 373-2 301-21 235-25 3a3-2 ^nting 

Th... were -looted for .tody and after a little * 
the following was produced* 

65-12 132-10 373-2 301-21 235-25 3U3-2 

g E R L ^ 

65-12 375-2 132-10 321-2 132-10 3U3-2 

B R E ME « 

t j x .A ♦ Kg ^cjL© nti 

Insertion of these values in all messages led . Known 
fication of the words "MAX" and "GLENN", the names o red to 

German agents, and brought out portions of names whic P p ^ ameS of 
be ship names. Perusal of shipping publications revealed a 

ships in Chilean ports, on appropriate dates, which ihen 
number of these partial names. 

The complete alphabet was approximately as follows: 


A - 1-1 

N - 3U3-2 

B - 65-13 

0 - 353-27 

C - 112-1 

P - 358-1 

D - 113-23 

Q - 373-21 

E - 132-10 

R - 375-1 

F - 165-6 

S - 391-26 

G - 191-30 

T - UU9-16 

H - 227-1 

U - U6U-1 

I - 258-25 

V - U86-22 

J - 263-itf 

w - 51U-18 

K - 267-1* 

X - 535— U 

L - 301-21 

X - 535-9 

M - 321-1 

Z - 535-10 


The above table is not complete because occasionally there 
srere several values for a letter in cases wnere tne beginning of 

lett ^ phaoetic block contair »d several variant forms of the single 


divided 


into 


With the «lphr.b®t recovered mid ^J^ed^Ss-ad ’ 8 cC ^ 
ibflti o block®, *h° 1 V w< * v !* ? „„ r Jvr+.unltie 8 fcr 


rtilona* 


50 

•IpM^Mobiook., « ror 1 ^" »rriv»l 

t«lnln' ohlp oamca afforded boo i inV olving # 

.ino. In tl,l. typ. of ™£* "^l,d dlBdhargod* 

and depnrturo dates, ty pea K •becaa» a 

Moot of the ohlpolng messages were ro ^ d ^ P ^ad part 1 *^ 1 ^!^ 
of the limited phraseology. Other brou ght out additi 

»nd the meaning expanded aa later meanages brought 
identifications of the plain text words. 

In March, 1041 another key word, C ^ w^^ 8ed 

for the mibetltutl on. The w votitution key _E0 although these 
on 17 June, 1041 and AOEOIIWOQSU on 5 June, 1S€U A i^ ovW . e d. 
two keys were used only once each, they were east 

All of the me s ages in 1940 and 1941 were sent with the 
'lng SUDAMEBIAT, WEDEKIND, SUDAMERO, or EOMARSUD. 


In March, 1942 traffic was transmitted from Chile with 
cable address BACOCHASE and the messages signed SCHOEN, who 
the German ambassador to Chi la. The key word was ADSWTKKhH > 
which was later changed to ZYKIfJPISCH. For these two keys, hcm- 
ever, all other letters of the alphabet were used for a separator 
between the page and line numbers. 


Eventually the dictionary being used for encoding these 
messages ..as found and was used to decode the messages. The 
title was "IANOENSOHEIDTS TASCHENTTOERTEISUCH der spanischen und 
deutschen Sprache." All messages were completely decoded after 
a copy of the dictionary became available. 


B. ST MPLbi SUBSTITUTION 

1. MONOALPHABETIC SUBSTITUTION 
U-4 HAMHURO-SNOLANO 


In Octobwr, 1*1*0, thw tS!T«t*tton **» 

from * suspicious station. Ths . preamble 

in five— lsttsr groups -nd wws P> ?£!««, -letter groups. This 
of two four-letter groups end two thrss J" AmMr i cttn "h*m" 


in five-letter groups end wes PW-”-- _{ _ tfcar groupsc 
of two four-letter groups and two thr«« lett ^ rloan - h *m" 
station used the chatter that was typical w i»ioh oh*n ( '" d 

operators, and it also utili.ed a aeries of ohU" , t.e., 

every day and which were in an alphabetical pr « transmitted* 

ACE, BOfT CEO, etc. On 18 October, 1?U0 this station tr 


hr CODE FROM YESTERDAY FROM 17 OF OCTOBER 


CTCP PNVP CCP PPC 


HEOOP ( 4 HSMM QLQKM EQOEL, etc. 

The preamble was tried for a monoalphabetic substitution of 
letter for figure, which proved to be correct* 


CTCP PNVP CCP PPC 

1710 09k 0 110 001 

When the traffic was tested, it also exhibited a frequency count 
of monoalphabetic substitution. Solution was as follows* 

HEOOP QHSfcM QLQKM EQOEL, etc. 

HATTE NH0F7 NUNQF ASTAU 

The preamble key, called "Zahlschluessel" by the Germans, was 
also used in the plain text to indicate numbers, i.e., 


UM X CCPP X UHR 
UM X 1100 X UHR 


lhe traffic usually ended with an incomplete final group of cipher 
text. Ihe call letters, preamble key, and substitution key all 
were changed daily, the day of the month controlling the progression 
of the normal alphabet through a Vigenere square. 


I 


that the 
a 


aiscovered 

■men the traffic "»= ‘“ISont r°“" an 

plain text -a. in for .««“ 

station in Germany send i n ® ^ter it was learned ^at 
agent in England. Sometime lat. er i the Brxtxsh 

h^d been seized and his station taken 

b. ix-AL MADRID -CAPS SPARTKL t inte r- 

in January, 1 9 US. traffic from this circuit^was^^r^ 
cepted by Coast Guard monitors. The firs ~ g ue to the 

111 ,«1* obviously in .onoalphabetuc ^ s ‘^e,uenny 

number of repeats in the cipher text, and ten tly monoalph*^ 

tion which, merely from usual inspection was pa 

The plain text was Spanish, principally reports 
5ighti6cl off Cape Spart»el# 


0i 0 ul ' i * 

Although all messages for one day employed the same 
stitution alphabet, there appeared to be p ‘ 

ainhabets. These were used in a regular day-by-day p o 


sub— 

mono- 


alphabets. ¥hese iere used in a regular day-by-day protfwxo.^ 

the same one being used every eighth day. f 'f ic from ' 

seven of these monoalphabets were intercepted, but trail ic 
the eighth day in the cycle was never intercepted. 


The components of the substitution alphabets contained 26 
letters, but, in each there was no W — the Spanish H being in- 
serted between N and 0 of the normal alphabet to form the plain 
component. ITie cipher component in each case was apparently 
formed by performing some trivial (rail-fencing or decimating) 
transposition on the plain component. 


2. ivimmwrio »o»«nwn«w-w 1 ‘» > ‘‘ 

a . >i HAMUORO-M® Db J AN ' ;r "' > » 0 h *** 

In Octol>er, lv>hl, « oireui* ^ h- 

oontrol -t-tlcm uwd U con* " \ “ | |, < h, .tot* ^ 

rfi®. Th« traffic had * «*•«■* ^ \£ C- <-S • 

.-roup ohaok were glv»i\ OUtaid* ''<'•* 

! ’ J0U U * , lIu iio.»«« 

the first sreup lndlMtlim ^>' rl J ' J”. "w 1 ,!,Uon. 

U2 Kroups in the m* *•««•. <>*» ,^ m \k»UO au\totit u 

quency count slewed charaotariatioa of polya > 

FUrthar inspection ravealed Ion* rapaat«» '•••> 


nniiUX 

o^srv 

innnw 

pnm 

tvywt 

xisru 

2pm 

HdXfS 

JlvUvTF 

TYvKH 

5ARWC 

ognm 

KLffF 

VHJUK 

K1..JIJ 

■rtVjAI 

JYNl’V 

UiisiLJ 

suoiv 

Hi^aIvN 

IISJRU 

VJKTY 

Nl'PRI 

Sfc*\KV 

OIV;>C 

GsiblS 

NUP.CS 

Fvuyj 

HBFF3 

PT.wT 

raxjj___r*vj?w 

mvPTc 


PJHvsR 

HUVF- 

DRJBF 

aFAVH_ 

JJKKM 

tuh v 

aC^SD 

x;«JCU 





It will be noted that tlwre is a six-letter repent U&UXC^) and a 
throo-xottor repeat (OIV), plus two two-letter repeats. There are 
196 letters between the six-) otter repeat and Jo letters between 
tJie throe-letter repeat, both divisible only by i. IHviding the 
cipher text into seven sections, taking every seventh letter, a 
frequency count was then taken t 


1st 


1 6 121 1512 13321 

ABCDEFGHIJ L l ! N r < S S I >' V • - * 


2nd 


1 5 3 A 1 3 11221 2 

ADCDiFGHIJKLMNOF^HS 


U 

U v 


, X Y 2 etc* 


All seven alphabets showed a monoalpiiabetic distribution, s ^ 
indicating standard sequence. This was confirmed when plain ^ 

N were assigned to the two highest— frequency letters in each ° .„ D -tionS 
seven alphabets, and the cipher equivalents fi^ed by these assu:- 
produced complete plain text: 

D D L U C Q 
A C H T b T 0 

8FVIHNH 
P i .H H I E L 

U F it F a A G 
T E H a U R S 

B 3 I .i ii E 
N A C ii R I C etc. 


Inspection revealed that the cipher components were displaced from 
the plain components as follows: 


1st - 3 
2nd - 1 
3rd - k 
lith - 1 
5th - 5 
6th - 9 
7th - 2 


Since the series >1 -h-1 -5-9-2 is the numerical equivalent of V 
this circuit ,.as dubbed "the pie circuit”. * 


It ..as later discovered that the traffic from Rio vent to 
Brussels, an auxiliaiy station for Hamburg. 
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iUjaj*KJu.»vrcc sudsti r • i‘ i »»-• - - IQD tc 


b, c-A SHANGHAI- ‘ANTON 
A turner of olaiuUatin# oiroultn <>;»- 


occupied ^'^sn : h ‘ ii 


A nunl'ar of olaiuU.tino oiroult«op- ■» ^ ri0trt ., r \:' wore 
duritv and 1 9US. Th* known lil» ■ ' ; ■ « ll . and Can*£ 

and .'ctrltn, Shun.,; be i «n»l Canton, >hnn * _at«jd b/ tiie '° f tat— 

and huliiu Th. foro-joiiv: circuits ^ bein' 

Guard dn.lt a a 6 -A, 6 -I 1 6 -C and 6 - , the cl *b« 1 the c-i-e 

minnd * U»o olaaa of truffle and ayitemo used. sroi tted over 

in South tanoriea, portions of thin tro-f C J T) ‘ "Aus.faertiC 

commercial channels, undor fcr«i m o.fico ' 1 ' \ li nvidencc in 
"iiplo.'t) na" truffle. Both external and In^-maj. «^ c bul* 

raessn-es indiooted that some of it was courier ** eludes tin® 

of transmissions however, wns via radio with typi 

oharaotoris tios • ^ 

I?io only traffic which was received consistently *V th 
Guard and r nd was the dhan;thai-Canton Circuit. 

of 

Svstoms omployod by those circuits urui-o of varying 
oomolowity, indicatinc that the Germans wore at one ana ■ » 
time cautious and foolish. Although some of the traffic . 
o tiier circuits employed transposition and still othars suds 


Hcssasea on Circuit 6-A were voluminous ar.d were mostly 
/LUOVERKLIIR reports, listing air traffic between China and In • 

In addition tiiere was general information about U.S. aid to cm a, 
U.d. ulanos and equipment, and information ;md rumors in China 
concerning the U.S.S.R. In the messages the Canton agent was des- 
ignated as CESAR, and the Shanghai station as CHARLOTTE. Although 
there is reason to believe that a mechanical device was employe 
to encipher and decipher messages, no loiowledge of the device was 
necessain- for either solution or reading of the messages. The 
system resolved into a 5— alohabot periodic substitution. eventually 
the entire series of 2h alphabets was solved, and from that point 
readin * of all messages became purely a cryptographic process. 


ach message transmitted showed a first group which '.'as re- 
psatru s the final 5-letter group. A secondary indicator was 
found to be in the date group, transmitted s a 5-figure group at 
the end of the message# The last digit of this figure group was 
the on y one concerned with the enci;h;rnent of the message. Tims 
two enciphering tables we re necessary: the date table end the 
s jurre of 2i basic alphabets (X and 4 wore omitted). The basic 


1 V, w- V^re random-mixed, and unrelated to each other. 

S letters of column 0 constituted the v-le tter ng 

which S the particular five alphabets were S enorated, the s ^ to bie, 
point being designated bv the appropriate l ” )duC ed W 

Thus each alphabet was a self -generating^ alpha by the 

sliding against itself, at a starting P°^ n 
indicator* 


DATE TABLE 

1 2 3 U 5 
6 7 6 9 0 

18 3 10 13 8 1 
20 15 22 U 5 2 
17 12 23 6 2 3 

16 22* 19 1 12 U 
11 21 9 0 7 5 


BASIC ALPHABETS 


222 21111111111 
3 2 1 0 9 8 7 6 5 1 * 3 2 1 0 


9 8 

F 5 K ^ T * 

OTFLHG 


6 3 U 

TTT 


3 2 


1 
T 

D W 


A"J ' Tr g yVTTT 


.< B 

U E 


BSHKVr JAIFCNU 
COJPUSFKNYRIG 
DCDFSTLOEZYGB 

e;7kirbanmohyl 

FKZT1PE JBSOCA 
GPTNODHFAVWEI 
II V I : jJ Y Z T .i D P A B C 
IDWUHOCEJTLAH 
J G S AFKPIRLDHZ 
KEDSECBL TAG 7 T J 
LEFCHUVRGKTOS 
1JZEL »BXI 0 0 3 P7 
IiBYJCFIDKRPLa 
0H7HAEGR1UIJK 
PUNZBHHGF >» 5 V R 
RLSHNVSGZEJTP 
ST3DJMRVPCK .K Y 
T A OPJSfCUIVFD 
U ' A B K X Y P V " N Z T 
7 I C Y T N 0 L 5 H Z T J .. 

;y roiiD a k h c j e s f 
yffaigzs :: y. u a 
z i v g .( d :: ibfrd 


WVTDHABEMLZ 
VIJMKPYTNRAH 
DZVGPFUJSGT 
M JUIIDHR 7 KQ 
ZKIICUJSYLRB 
JHIHllSFKOGU 
GPZNRBK SYVF 
NBEATVCOUTM 
PHI 07LIUIFN 
YDNZAIJB w U P 
CJFTDUAIKHS 
TUOSoGZVH .< A 
RYSF .iCPTNZD 
EAIJITDLCOK 
I C D 71 F 0 H A G K Y 

U E 3 H II - L F A I 0 

SRHIB h H G L E jl 

LGCSZ.i OKFJR 
A F R rl G *J Z D P 3 J 

5 li 0 P L II V Z T U I 

H 0 L 3 J S ?. C D T V 

KlAUCHTPJSE 


Thus with a message shov.-ing the letter indicator 0l2l9» 

phered on the I 9th of the month, showing the figure gro P 
the method of encipherment was as follows : 

The last digit of the date-group designated the column °- 
figtires from the small number table: - 13 — U— 6 — !—&• 


The starting point of the successive self -generating 
bets ’.vas the letter formed by the intersection of the key— lc 
found in the standard alphabet in the column of the alphabe 
table and the letter under column 13 for the first alphabet, co 
h for the second, etc. The five deciphering alphabets for this 


particular message, therefore. 

would 

be 

: 


1. GPTNODHFAV W 


I 

Z 

K 

M 


U 

J S Y L R B 

SI2.. 1TCUJSYL 

R 

B 

G 

P 

T 

-> 

0 

D H F A V \H 

2. IDi, UUOCEJTL 

A 

u 

G 

P 


N 

R 

BXSYVF 

sivnOifUHoc 

E 

J 

T 

L 

AX 

H 

G 

PZS8P.K 

3, LEFCHUVRGKT 

0 

S 

Y 

D 

M 

Z 

A 

I J B W M P 

I J B v; ' p L E F G H 

u 

V 

R 

ry 

U 

K 

T 

0 

S Y D K Z A 

4. KRDSECBZTAG 

L r 

J 

P 


nr 

li 


V 

L Y U I F N 

:: XRDSEJ3ZT A 

G 

M 

J 

p 

H 

•Y 

0 

V L I U I F 

5. r r p a iczs v u u 

K 

N 

H 

0 

L 

B 

J 

£ R 0 D T V 


P A I G, 


etc. 


The type of alphabet square used by tills circuit has been 
designated by the oritish as a Latin square, as distinguished from 
a *— ^enere square, wherein the alphabets are successively f'eneraLcd 
fron the sane basic alphabet. 


C. NONP’SPIODIC SUBSTITUTION: RUNNING KEY 



,y stems ?PP? a ^tion*5« 


jrocedure 


group had a common transmission style copied from affl as a ^ore 

that set it apart from otner types on the air, «s we circuit 

or less common cipher system, which once broken m ° saiue ui^e. 
would give a very good clue to tne others in use at * ciphers 

It was also believed that with the public revelation ceT .-tairly 
employed in both North and South America, Hamburg wnu case, 
effect some immediate cnanges, and this proved to be e 

1. j>~G HAMBURG— VALPARAISO 

In March, l^u2 two new circuits were found which had “^1 ^ 
the characteristics of the Hamburg group: daily changing c » 
slow transmission speed, and voluminous "amateur" chatter, 
frequency tables made on the first few messages showed a ox st 
bution that was almost random. This fact clearly eliminate 
transposition as a system. Further tests for repeats gave none 
other than those wnich woulc be expected by random w* thii. any 
single message regardless of length. This indicated a system 
which either had a very long period or had no period at all. 
first four groups were found to contain a concealed enciphered 
preamble of "the usual type, but the function of the fifth group 
could not be determined. In each case the fifth group contained 
the san:e letter three times at varying positions within the group, 


F G r’ F 5 


S C 5 ^ 6 


V V V .1 z 


tfhen so» of tne encipnered preambles were solved , It. " as .. 
ser -<d toat tney were derived from sections of Spanisn plat*' ’ 
for example, toe first preamble <ey (Zanlsculuessel )* solved wa 


123U567890 

ELAVIOK.i). 


Tnie indicated tnat a book was prooably being used i° r ae j- ou rid 
riving toe keys. Altnougo no repeats of any consequence were ^ 
within any one message, it was noted tnat w.ien tne messages eI V er 
ciphered on tne same aay were written out, ana lined up o r ‘ e 
tile otner, repeated trigraphs, digraphs, and single letter 
snowed up oe tween messages, always in the same relative cip a * 


positions. 


Message 1. 

L K N L S W K 

" 2. 

T D E J Z Z F 

" 3- 

I H E P H J F 

" U. 

IPSPHXP 

^ • 

# k s 5 T b s 

Message 1. 

C Z 0 q J T R 

" 2. 

M h S S 3 D V 

" 3. 

S D 1 S R 1 U 

U. 

J C X S A G I 

These 

repeats, when t 


X X 


SKLRCLUDIPBEG 
0 YWMTXUYJFLGORA.A. 

IFCPEaLMSDYXERRT 

HLridSKEUTTKE LB D T 
1 . . . . (Remainder missing) 


F K X_Z I E H T R 
Y H X_Z DVB 0J> H__H 
U N V X H it X M_M BQLF R_Y 
XUFlIUIPRCBPSDVl BO 


H H U I B Y 0 H 
F X S H R J 
V H 


criterion for messages enciphered in tne same key. All the 
pnencmena suggested tne tneory of a running-key systemt i.e.» 
ore in wnich the juxtaposition of two sliding alphabets is deter- 
mined by a continuous aperiodic key, usually taken from a book cr 
magazine. Since the Germans were prone to equip their agents with 
systems ir. whicn the elements could be memorized except for an 
imocert appearing boox, it was hoped, if a running-key had been 
used, tnat either straight or reversed normal alphabets had been 
employed for the sliding alphabets, acting on tnis assumption 
it was decided to try it on the messages already lined up in 
depth. 


Tne cipner letters ir. tne first position ir. eacn message 
were written out and tne plain component completed, likewise the 
next four or five columns of cipner letters. (See Figure 1) 


* I6i was tne term given to any key providing 

letter equivalents for tne numbers 1 to A. figure may 
h. ve mere t an one letter equivalent, nut no letter nas 
mcr- t.;an one figure equivalent. 


Component 


Then the lires (or generatrices) which snowea tne nignes 
percentage of high frequency letters were ur»aerlir«d. (See 
Figure 1). it was noted that there were two or three lines a 
least which were possible in each block. 3y trying all of 
possible generatrices in the first block against all P° ss ^^r e 
ones in the second block tne two which gawe the best digraphs 
were chosen. The last lire of the completed plain component v 
chosen in column 1 (Figure 1) as the best for beginning the 
message and the best generatrix in column 2 added to it. 

FIGURE 1 


Cipher Col . 1 Col. 2 

Text L T I Y N K D Y P X 

l V u J 2 o lTzTl- 

M V K A P U F A A 4 
l O W L H Q U B 3 K 
I Plica OHCTO 

A Y N D S PIDUP 

P Z 0 £ T QJEVQ 

S A P F U R K F .¥ R 

TBQGV SL3XS 
U C R H A TMHYT 
VDSIX U N I Z U 
fi t T J Y V 0 J A V 

X F U K Z X P KBS 

Y37LA XQLCX 

Z H I j( 3 Ul/D I 

* 1 * ft C z S N E Z 

37TT3 A T 0 F A 
C K Z P E bUTTb 

, dlaqf cv^hc 

/ i£j.'3iia DA HID 

I F N C S H E X S J E 

} JODTI FYTKF 

1 P E U J GZULG 

I 1 F V K H A V M H 

J R 3 * L I 9 I H 

K S H X X J Z X 0 J 


Col. 3 


ft 

£ 

£ 

0 

1. 

0 

¥ 


p 

0 

p 

G 

G 

Q 

p 

A 

H 

H 

R 

A 

R 

I 

I 

S 

R 

S 

J 

J 

f 

s 

T 

K 

K 

u 

T 

U 

L 

L 

V 

u 

V 

M 

M 

M 

V 

A 

N 

K 

A 

w 

X 

0 

0 

Y 

X 

Y 

P 

P 

Z 

Y 

Z 

Q 

9 

A 

z 

A 

R 

R 

B 

A 

B 

S 

S 

C 

3 

C 

T 

T 

D 

C 

D 

U 

U 

E 

D 

E 

7 

V 

F 

E 

F 

1 

.¥ 

' 1 

F 

r% 

u 

I 

X 

H G 

H 

r 

Y 

I 

H 

I 

z 

Z 

J 

I 

J 

A 

A 

K 

J 

K 

B 

R 

L 

K 

L 

C 

C 

el 

L 

a 

D 

D 

;« 

X 


Col. U 
L J P P C 

li K ^ 4 t) 

h L R R E 

01(33 f 

P >. T T j 
5 0 U J H 
R ? V 7 I 
S Q H J 
TRUK 
U S Y Y L 

V T Z Z M 

W U A A N 

X V B 8 0 

Y W C C P 
Z X D D Q 
A Y E S R 
B Z F F S 
C A G G T 
DBHHU 
E C I I V 
F D J J W 
G E K K X 
HFLLI 
I G d 1 Z 
J HNNA 
U 0 0 B 



Vb If* 


14* au 


Hie generatrices chosen from columns 1 and 2 weret 


1 

K 

S 

H 

X 

li 


2 

A 

T 

0 

F 

A 


The digraph XF suggested the familiar X FORTS X asea by the 
Germans in previously solved systems to designate continuations 
of messages. After having taken the proper generatrices it the 
next columns to complete this word the other messages read as 
foil ows i 


1 2 3 U 
K A N N 
S T E I. 
H 0 E R 
X F 0 R 


U N 
E N 


M A N E R 


ATith this much plain text as a start, it was not difficult 
to continue this process until sime of the messages were complete. 
However, when an attempt was made to recover the^key by taking the 
v< * r ^ ous letters opposite A in the enciphering alphabets through 
the message, no intelligible text resulted. The same thing was 
true when the letters in the enciphering alphabet opposite A in 
the d~ ciphering alphabet were taken. After some study, it was 
established that the letter of the alphabet whose position in the 
normal alphabet corresponded to the date of encipherment of the 
messages was used as a "reference letter", (i.e., on the 1st 
day A would be used; on the 26th day Z; on tne 27th the numbering 
started over again and A was used; on the 23th B, etc.). This 
was the letter that appeared three times in the fifth group of 
the messages in most (out not all) of tne circuits using the 
run.-. mg-key method. Tne reference letter *as marked on tne cipner 
alphabet which was slid against the plain alphabet — botn ul.,rw- 
bets beir^ tne standard r.ormai alphabet. The reference letter was 
sef under the Key letter and tne cipner letter tnan appeared ana-r 
the lair text ’--•tter. 


w 


t*«t or 


1 in our 


* boV *’ 


T*m /<✓, • 1 >' h<ir 

L 8 N L M •< * ’ * ’ * 

*,„> u,m i/UUi *.-«♦. r#aov«r*d 

K A N N « It 0 r • * * * ^ ^ clnher 

th* numtw,-**)/ imtimi- o*n •»« r ™ 1 ,ir ' \#tt«r opposite the 

fcw*t wrtlwr to- pl«t n lettor *rnl rwwlln* tno 
l-M-r. Thud, 


P'1 Min I P 
fit i>hmrt '4 


(J U 8 T U V m X Y Z A B 0 U J r '* 11 ], J t M N 0 P 

14 T II V « X Y /. A H C D B K ') « I J £ 


I, )» §mt uiKimr K | ft In the r-f-r-no- l«tt«r, 1 running key. 
in Him fifth urou;>)j raadirift Above B la K lor h 
Thl* >» oonllnu-d throughout the m-reaga «n followei 

Key i It i » U K N A 3 . • • ,_l 

pi«im rx n re n s t . . rr 

Ciphwri U NLIHKD . . • • 

i)nf i reeult of thle procedure won that when the Key letter was 

the pft/A* on the pie in text letter the resulting cipher letter .<ras 

the reference letter. Tnu«, 

Clphori lIUPHjm. . . • 

Pin Ini H 0 H T S » S l . . . . 


Itefarenoe letter - b 


PJaini P^HJJTUVUlfnHCSiiFriHIJKLHNO 
Cipher i P '4 H(J)T II V W X Y £ A 8 C D t F 0 HIJKL«*HQ 

Key i R I 9 n B H s , . . . 

Pint mi TT? 'O' 5 s . . . . 

Cipher i I H t P « J F 3 , . . . 


/.von thou ;h the Key and the plain text mi^ht be ir. different 
J.»r» ;u/i '**, certain l<*t.tf*rn would be hi.'.h In frequency In both, 

• r/: ‘'''fiainjir itiy the role renew letter tended to snow hi ’her than 
f -in-, n In a frequency count of the cither text. Tnis proved 


usefuJ in some of the circuits wnich hi no . f or t,ry^ r S 

letter in the fifth oroup. I .B. J. runs were d ^es, 

a probable word in the key or plain text throug ..-cording to 
anti for testing generatrices of tiaffio in aep • 
weight<?d values. 

Although there was already another station in ®P®^Hg£ e iy 
tireen Chile and Hamburg, Circuit 3—'-' was se ^ U P t q re — 

separate unit after the Brazilian spy rounuup. nne 

ported much the same type of information as the torn ^ 

giving data on Uni ted States equipment, ano snip movemeri viuh” » 
was later learned that 3—h used the Spanish book. b J- n , tne 

but this book was not in the possession of this of x ice ^ 
operation of this circuit. 

The solution of Circuit 3-0 indicated the type of system 
• which Hamburg would probably employ next. This proved to 
true, for the circuits found for a long period after March, 
all fell into this category. 

2. U-F HAMBU.1G-LIS30N 

The second circuit which was read with the running key 
substitution method was first intercepted in -larcn, 19u2. Tnis 
circuit used the concealed type nreamble located in the first 
four groups, with the fifth group of cipher text containing the 
reference letter. The book used for the running key was finally 
identified as the Portuguese novel "0 SERVO DE DEUS. W A copy 
of the book was eventually obtained by this office, whicn made 
decryption thereafter purely cryptographic while this type system 
was being used. The information passed on this cii'cuit concerned 
movements of Allied vessels from and to Lisbon together with the 
customary contacts of agents. This circuit nad anotner unusual 
aspect. Up to this period, the transmission of messages was 
relatively a simple operation technically. A definite hour was 
decided upon for a fixed schedule — weettly, semi-weeKly, oaily — 
and one frequency was allotted to the control station in Hamburg 
while another was given to the answer. Circuit 4 -F at first used 
only one frequency and one schedule time, but gradually more arid 
more frequencies were given to trie answer station in conjunction 
with more schedule times. Tms m^ue interception much more diffi- 
cult tr.an it had been. Tne frequencies used were usually under 
soii^ much s tror -r legitimate station and low power was inten- 
tionally used. Tne Lisbon end of u^rouit U-F vras a?si;r.eu as 


/ 


o f 

many as eight different frequencies; later on a different * 
schedules was issued every week further to camouflage tne 
missions. 

3. 3-J HAMBURG-SOUTH AMERICA 

During May, 19U2, a station was found transmitting t,HO 
messages over again and again for some tine. For a few mon^ c ^ 0 her- 
this station sent what appeared to be abou+ seven different rn . 
ments of the same two messages. The cipher text contained an e 
ciphered preamble in the first four groups. The two messages 
yielded to solution in the running key method, but the approac 
was through the different encipherment of the same messages, 
text was found to be ir German, the running key in Portuguese, 
was another attempt by Hamburg to begin operation again in South 
America, but no contact was ever made with tne answer station; 
after a few months of persistent calling, transmissions ceased. 

i*. 5-D HAMBURG-THE CRIMEA 

• 

Beginning in June, l^u2, calls and spotty traffic were re- 
ceived from a station which indicated classification in the Hamburg 
group'. After tests were mane, it was found to use the running key 
method, both the text and key in German, the key derived from an 
unknown German book. The preamble was enciphered in the first 
four groups, tne fifth group containing the reference letter. The 
information sent on this circuit was mostly concerned with granting 
leave to personnel and other administrate ve matters. Traffic on 
this circuit was very irregular. 


-v -"u. a vvaTvoa . 


AttT Ai-X 




a. d>OT!« 


i* h-.' saj^^w.v* m 

V* . i-tfe* * ***.Uov.x.» *t*ti.x\ W»* h *^ 

**• ,v>w :-vt mu tt tvsr and »^ioh shewed the mm > W 

«9wm%KCisttM MMt ^ V ... nneaeMe as th* *t*tWX\ n • v louU a 

V* x^TS.,xrf . V . V S** ^^*). In * *howt tow* 1 

tA-\; -h»o* wr* t»v> ,'th.w •♦*tl«va in the circuit. * * - 
~ 5 .-.-'- •*$*• ^.wUat call JL3R »x» fovnd to '-* the neutral 1 
*f rr JSS*, VN* Vat tar in tarn relaying traffic fro* •“± J ‘ d 
meathor Jt4.ti.vs asaed dLSXX. TSt traffic eent b * i t f« n . r' foU r- 
T r rr^-r ..JSS fire-lettwr groups with the p o*nbl« of 
leffcar -roups joi tw.' thr**-J.ett»r groups. Ibe rol * y J .>. . n „ n t 
fr«s 3SS to >TT -SFT WJ transmitted with only a 1#t ^ C 
jsctA th# »v *l# gSF JVK XSNRT or dSF TOR QLSXH, depending up ^ 
tdw .iirwcti.* tf the traffic. 


rt» jxtse -smith the director of the Federal. Bureau of 
rsenst^'Xticc requested the Cowmandant of the Coost Ouard for 
XJS.S .V.OJ in the solution of a series of suspicious wessages* 
7-cc sxr-tlmatian, sew* of these aessa -ss we.-e found to be 
ioectioal with those transmitted to WY TEST from G..SKIJ for 
rrlif to » CK. 


traffic transmitted between YVT TEST and AOR was ex- 
-v > , and found to hare a plain te.t frequency clearly 1 ™*\ cat " 
transposition* Staple ooluavar transposition aas assumed, 

Ind attests aa3* to anagram the columns resulting from 
assanctioos for different key lengths* On one cay, among several 
trs-tsrsitte<L one was observed to liave a total of 200 
mother of liOO letters* Ihen these taro messages ware 
mrittan tut with a twent^r-letter key length, .certain phenomena 
trero nctec: 


Message 1 


1231*5676 
lAH A U 0 D U X 

® ® © N T A A D 

- 1 >' S A Si T W S © 

it hcT?h t r® # e © 

5 <B> 1 S CD E 0 U N 

6<i)XK li)EERI 
7I@KTKDA© 

6 EREQEND® 

9 F <2> A X U 0 E N 

10 OD I R I V »V F Z 


9 10 11 12 13 11* 15 16 17 13 19 2 ° 
@ T B 3 L 



Message 2 

1 2 J U 5 6 7 d 9 10 11 12 13 11* 15 lb 17 16 19 20 

1 00 L X I brs^ekxnkti®olfu 
2(X0@EINRWAfiWIPOaMEOQSri 

3 Ha TFAAR^BRl 3 E 3 E ® Z I 6 N 
i»4(S>AL(5)OR©)EiSvjfi.riDkENX. r ^ 

5 ^ X E (I) L 0 N KLD0EIX X P @ D A U 

6 (i*> o L 1 X E TEH^aDN i. a (&/ E 0 r 

7 S ® SElACJ^Xd j' U X N X A V I S R 

tiU i'RXL0 rJ)NDUNDAE(S£ a3ti 
9aCxXElTa^3YNSNAPXD^ T 
10 (j.iRStfOUJIZ^EORSE&'ON 1 T 


11 

vT~F 

H 

X 

S 

E 

A 

D 

T 

-r 

B 

X 

L 

Q 

N 

X 

F 

E 

I 

r\ 

12 

e r 

H 

N 

J 

Z 

A 

T 

U 

u 

E 

s 

Z 

F 

B 

R 

E 

R 

N 

I 

U 

- F 

M 

S 

S 

T 

F 

Z 

E 

I 

T 

A 

U 

Q 

K 

A 

F 

E 

E 

I 

1U 

> C 

F 

L 

L 

• n 

A 

Q 

y 

A 

s 

E 

R 

A 

E 

3 

L 

4 

I 

E 

F 

15 

L) A 

E 

E 

t > 

a 

I 

K 

R 

E 

M 

J 

E 

N 

S 

D 

I 

F 

P 

A 

R 

lo 

ff N 

J 

I 

E 

L 

X 

A 

L 

o 

K 

E 

5 

M 

L 

X 

J 

V 

k 

Y 

17 

tX ill 

K 

a 

X 

E 

X 

L 

N 

X 

0 

E 

K 

D 


R 

H 

E 

N 

T 

lo 

I H 

A 

i 

H 

T 

E 

N 

N 

1 

H 

A 

D 

r 

L 

0 

E 

T 

A 

A 

19 

ti 9 

R 

,7 

E 

i 

N 

L 

>4 

K 


E 

I 

R 

4 

T 

T 

B 

S 

\ 

20 

Q « 

X 

H 

u* 

w 

i 

I 

C 

E 

U 

X 

F 

F 

F 

0 

R 

E 

U 

E 

S 


(1) Wien Message 1 was compared with the ten 

top lines of Message 2, many letters, including 
many low-frequency ones, were noted to oe in 
tiie same position in the same column (see aoove). 
ouch’Teoe its were not observed by comparing 
Ifessa tp x with the lower ten lines of Message 2. 


(2) It was also observed that on line $ i r . 

both messages, the letters H .. I .. r .. J 
appear, while on line to directly underneath 
them the letters L .. M .. 0 .. N appear, 
inis led to the consideration that the low- 
Jrequency letters seen in both messages 
could well be nulls inserted into the plain 


WaS tnan attempted, and column U and 5 were 
Theop Pr ° uce plausible digraphic combinations for Jeraan. 
in the li^ S S a ^ 8 *uf tt ' er in the second message tnan 

the } t * ut ^is assumption was not discarded because of 

in Vi JJ?" 1 ^nations, for the single letter had beer, used 
xn Circuit k-A to replace the digraph CH. Thus: 


Message 1 


Message 2 


U 5 


U 5 

D 0 


T~5 

« T 


I N 

H T 

• 

F A 

X® 


L® 

® E 


mi 

Qy E 


fn t 

T F 


E 1 

•4 S, 


X L 

X ii 


X E 

I V 

— > 



- 

i : J 

s $ 
1 

A 1 


I E 

:• x 

•* 

'v _■ 

• • Lj 


Ior tne }enan numeral ZIO on line 10 or Zessa^e 2 
wcere we already na.e the letters .VO, the only Z on line 10 
m column 9 . Aadinj column 9 to botn alignments: 


Message 1 Message 2 


9 4 5 

7 » o 

E i T 

I Q T 
F T A 
nffiE 
Q © E 
S T F 
0 Q E 
L X U 
E I V 


9 4 5 

E I B 

E I N 
B F A 
E L A 

L ffi L 

E ® I 
X E I 
XXL 
Q X E 
Z '.V 0 

T X S 
U N G 
E S S 
ALL 
E E G 
LIE 
X G X 
N I Q, 
Q, W E 
ERE 


Conceding that I and M are nulls in c olumn 4, all 
trigraphs seem possible. Continuing the anagramming 
by assuming the numeral SINS on line i of Message 2: 


Message 1 

Message 2 

9 4 5 14 

9 

4 5 14 

X S 0 

E 

I B T 

E Q T I 

E 

I N E 

I Q T I 

3 

F A H 

F T A B 

E 

LAD 

D © E R 

L 

©L X 

X 

E 

©IN 

i T F U 

X 

SIN 

0 Q E I 

N 

X L A 

L X U N 


XEN 

E I V C 

Z 

W 0 X 


T 

X S Q, 


TT 

u 

N G * 


n 

< 

5 S Q 


\ 

I. L E 


V 

— j 

E G S 


Ana^-ra timing **s continued by this method- when « 
column would fit except -or a f .„ i°JL r , by 

mhl^i ®*? h " Ba ? a< "' *F*'’**t the other, t) e letter* 
nulls inconsistent were found tobe the assumed 


1>S5»|« 1, 


1 19 16 12 13 7 6 G 

-i S C »V t D X D 
D £ T V £ R D A 

H - V I u S ® W 

jl 1 A I. B i ® ,v 

@ E * K ¥ V K ■> 

jT~z — 


47 

J 0 

E N 
F V 
© F 


~n 

N y l 

I A N 
E R X 
V £ 


9 

X 

h 

T 

A 

F 

D 


4 

D 

Q 

Q 

T 


5 14 10 17 2 18 3 20 11 16 

0 HOT HE ALA® 
I G X <£) E N C XP 
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Wat.er,. or the f irst fiC* ex * cti * raflaot the null 

thi f* twic ** In adaiti mi 7 X ? “•*** tf * *» the r*rUotvon 

inserted into 

t; , PUrW *»r stu<v OfX? o f 1 t r * st * rti *S over After 

*Vle, with A niKhv.t ; * ' tnxt ^veAiea a ooin^M, talagraphio 

*eot fielped later on i,- °* °« m *" words Abbreviated. This 

£^* st **P> howovir, w ^ r ^ r n^ n ^ P ^? ifti ° f ***»**•*• *»• 

*? v'e app» leJ by the ’ • ' *• n ^l pattern. it was first believed 

*7* £i*id over or its w/,- * f. rid lor fxv ® **■*»*» then turning 
*fter several morTL^ L "** °* xt fiv * Un.a. However, 
nulls were inserted 11 was found that the 
numerical transposition .7 ° *t n text di *£ rA ® acoording to the 

n **>• Fo »* example, with the key 

1 - 19 - 15 - 1* - 13 . 7 . 8 etc# 

null I? letSis^Yom ihi^ 1Umn 1 ’ line X » th ® 08x1 

sec 'au, etc. After is ^ third null IS letters from the 

™.". K wd for The « ““.I"* 11 * thus inserted are 

again on line n. Kro»-in- ^ process beginning over 

received wtu.cn had an ir!-^ i f l> ^ lncl P 1 ®» "ben a message was 
col teens could be identir diagram, certain long and short 

and those «fle!tia i i ay recognising the nulls on line 5 
=as-ari of Id? 1^? U " Q ' r th “ Jn Un * “• f ' or with a 

therv^woold^be ™ Key, 

of nine letters. v t " !,?" ntt * m 

five line*? a hove fnn . 13 " rit ten into a crown diagram with 

coluro nst " th * orl - lndl r « ct ^le because of the five Ions 
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alphabet -°al nulls have been employed, then the 
‘ * f J arQ probably on line 5 of the enciphering 
> , ''■-th the letters K, L, or U possibly reflected on line 
• :*xamj rang the crown diagram, the combination I is noted in 

K 

colmin < as v,cll as H in column 18. If these are correct, all 

J 

tho n ^ Ils on lines 5 and 6 have been found. Inspecting further, 
xn column 10 F..H can be found on line h and its reflection, anb 
in SQJunn 1 5 0..N can be located. Thus, the tops of these columns 
„ finitely ce marked off, and any anagramming with these fixed 
~ ‘ ' l15 "* L ^ X correct. Continuing the inspection, in column 6 
x. . J is observed. Thus, if columns 6, 3, and 10 can be fixed at 
tne top, columns 7 and 9 can -Iso be markod off. Thus: 
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VW T.^T-OLEMN ".ELAY 

T:.o truffle w'dch w.s passed on tills circuit was tested for 
a twonty-longth key after the solution of the WV TEST-AOR traffic, 
but no rosul Ls were obtained with tills key-length. However, tyro 
messages were received which appeared to be in the same key and 
to have similar beginnings : 


ifossa ,-e V A) 

y > X 11 If 5 3 T N R 2 T I Z V Z 0 0 0 I I S etc. 
.Message (B) 

I X L U a X S S S N U F S Q S S T X Z ? V etc. 


Those messages were lined up and examined for spread repeats, 
and sixteen repeats we re found, (doe Figure 2.) The indicated 
key length of 16 was then confirmed by dividing the total length 
of' the . icssage bv 16, and verifying the column lengths shown in 
?i rare 1. Thus, the spre d repeats not only revealed the key 
Ion :thj but also separated the Ion ; and short columns. In 
nessa © (A) all six-letter columns wore placed in the tentative 
vlia rav, leading all the il\e-letter columns to follow: 
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2“ < -r m r f T ^°« tram,-, nulls «,r. inserted into the 
Si a '° olMin S to tl,o numerical key. About 

r'wj'tn ^‘h ^f^tted by the QLENN-VW TEST circuit was 
°" y in the «**»•• Utor the key 
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circu1 ^ ' iad been operating for sane time, toe key was 
inT' °f 23 } etter3 > »«t tiie new key was transnd. oted 

2jm,j en.-tJi kay^** ^ey and no solution was necessary, '-’he 

oittsrableitewiderstahd 

There was another portion of this relay traffic which was 

tlio 8t8 ^ different type of system and is taken up in 

cno ue^ixl under Section D- 3 . 

, J' 1 ® C ° a f t Guar d was later advised that station VYV T2ST 

Fedor 1 >«.? I ^ TT T York J . operating; under the control of the 
ca ± H „ au ° *■ investigation j the control station AOR was lo- 
cated *n ifanburg. The traffic via relay was from and to Mexico City 

and °°ert?n at | U P a dire °t connection with Hamburg 
3orlin 11 * ENRY in the P ream ble stood for Hamburg, BOSTON for 

2. 3-C i iAMBURG— VALPARAISO 

j » , , In April * the monitors found ar.oth r circuit which 

■lad the same characteristics as the Tl^ST-AOR circuit, except 

+ n0 + 0Ut ® lde ^P reamble was en Ployed* This circuit used the 
TO ‘ ° ’"'‘ 1 . c f . . J ' s hYL, with the control station sounding 

vai., nueh A ike AOR in Hamburg. It was found that the preamble 
w.uch nad pi'c viously been given outside the cipher text was 

-once.ia.ed in the first four groups, the Zahlschluessel based 
on: 


OSZILLATORFRSQUENZ 
1 2 3 li 5 ♦ 6 7 *89.000.0. 


urns, tie first four groups, employing; t.iis key, 

o i 1 j. I J 0 ^ Z G K 0 R L !) C *7 

2101 . 1030 . 185.0 00 


1 V '.7 

. 0 . 


z.iis trai„ic v.as also found to have a plain text fre.juencv count 
ai:i several messages were easily ana rarmed and the resulting hey 
\r b - ;am round to re 20. The key was constant for a short 
t rc, *jcn UoniMrr, issued instructions to reverse it: 




■^KAttDAUprv . 

Hfll, 1 20 6 2 n 16 ' ,8 i * I K K A ll •< T 

i.i io .13 I* 10 12 8 9 j ii it 19 

Rovvrao, lj 17 jo J t J J ** g a K ? li A 0 U A II " •* 

• Jli U U 18 9 16 13 2 5 20 3 lh 1$ 6 

xo ' 1 " ***** ®n» uaiiuj botii'tjM • v ®bur ; ; r* another cluing. In 

* W5tJl **» dirwot ami r.vtu-a.d k . y8 . 

^iroott oi 17 18 x 7 9 lS ? 2 - 1 « K R S T A N p 

7 . 19 10 6 IS 20 3 3 5 13 16 18 2 11 U 

.w„, 3 d i 17 it j I ; id j • * d » ? i » 16 ll 

J novol^'V”* K.ok rU °Tl i ' n3 in U “ tr * ftt0 for u » in S 

Alhatross edition of "South LA TI S8loct ® d was **>• 
a soci'ct number, to which i ns ar ,J" * Th ® was assigned 

and the number of tha th f su » of the day of the 

5 1 ® resulting total design.- ted ® BW8S *** Wi » a enciphered, 

t-io transposition key, and the r i P f iT ?. V ® which ^ Zahlschluessel, 
determined. The first lTV,^ ! 1 lotWs for each station were 
used for the Zahlschluessel^ ffjT*? tiers of tlie first line were 
for 0 . The initial Yariants 

indentations) were taken in order f^tk -Olinos (omitting 
f®*’* ca->'ly changing calls w» iyi h , ie ^teral transposition 
- »»t } letters of the last line . ) ueriv ' 8d rrom the first and 

St line on <*« P*8«, read in averse. 

a ~' ::L " ‘ t: ‘» pa. ,-e number ^\r»d scTlonr^as tf procodure far deter- 
oonsv.nt, only la keys',, w ” Jlbl.? U ? 6Crrt nuBlbdr remained 

1 e.x’atou one day earlier in .v, ° ’ ^oraf®**®* each key was 

true for the -ahlschlue^el »d s”S^ " tt ' "* S "“ held 

3 9 3 ^ HAUDURQWUO he Janeiro 

lm:th ■” s to «“ W 

J wined a conoo&led 





U— croup preamble, as in the 3-C traffic. Hulls were used as 
before, but neater care was taken to make them indistinguisliabie 
from the other letters of the cipher text. V.henever a series 
or nossa;jes represented sections or one long plain text rTiess< 2^, g 
all sections after the first invariably began with FCRTSX • 
fact v.-as utilized in the application of the Grown diagram 
technique to the solution of the majority of this traffic. 


The Zahlschluossel, transposition key, aid call letters 
for tills circuit changed daily; but they did not recur in a. non 
cycle as did these elements in the 3—C traffic# However, it was 
discovered that the keys and calls used in the period from the 
17th to the last day of one month were repeated in the period 
from the 1st to the lj?th day of the second month following# This 
led to the conclusion that, in the use of a key book, the page 
was determined by adding to the agent* s secret number the sum of 
the date of encipherment and 8 times the number of the month# 

Since no repetition of keys was noted between successive months, 
it was assumed that the keys were taken from two different parts 
of the page, alternating month by month. The key book used was 
''IN THE iUDST OF LIFE", but it was never available to this office • 

2*. 3-D HANBURO-RIO DE JANEIRO 

• The same month, and approximately the same time as Circuit 

3— A was discovered, another sister circuit appeared on the air# 

This circuit used daily changing calls which built up into 
a cycle, indi ating the use of a book in the manner prescribed 
in tiie ±ns tructions for Circuit 3—C • A twenty— length key was 
a ;ain found tc be employed in this traffic, together with a 
concealed preamble of h groups# 

This circuit was particularly active in reporting ship 
movements m the Atlantic, especially in South American ports# 

For :ur}oses of simplification in reporting, the agent running 
the circuit used a simple code for certain cities in South America, 

AAA— Arrived Rio do Janeiro 
dEB— Departed Rio ue Janeiro 
dCC— Arrived Buenos Aires 
DDD— Oeparted Buenos Aires, etc# 

Theoc 'etters rere placed in the transposition diagram twice 

i •£# , 9 

OCCXCCCX ms® STAS etc. 
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~ U *r *“ ln * —» 

■ elution. In tJw V 3 80 * rou P th«s« letters as to effeot 

tho traffic from ti, , r\ r *P or ^ 8 » farmed the hulk of 

uso any nulls Ttm h L- '!* n * ir ° tho agent did not 

keys was tho Alhut 1 °k u««d by this circuit, for tho oalls and 

Si w.,s not iv^aMe°S^ ** " THE STOR * » SAN ICtCHEUS-, 
operation. 1 118 ^ Wlis office w die the circuit was in 


5» 3-D 


OERMANY-RIO HE JANEIRO 


S«Dtor-hnr tit' 1 . ^ i,8n it was first discovered, until 

well is* th« S ns ®4 * constant twenty-length key as 

excoDt a ° n * ■ a P t ’ °»lls GSL and ALD. No preamble was used 

in -;ar.+ ' ? °*'/ et *' or check. Very often messa es were sent 

in sections of 200 letters, for exar.ple* 


1/200 2/200 
or 1/Ii0 2/ho 


3 A5 
3/US 


Sending the messages in completely filled rectangles greatly 
aided the first solution of the keys 


8-1 -2-15-6-12, -l6-ll-3-l7-io-] i -9-iS-i9«20-12-7-5-13 


Jn Soptenher, 19Ul, this circuit changed over to a different 
type of transposition, and it was fo\md that the German center 
receiving the traffic was Berlin. For further details see Section 

D-3. 


6. 3-> E RRE'£N-P.I0 DE JANEIRO 

This circuit was one of the few exceptions to the almost 
invariable u: e of a 20-length key for simple columnar transposition* 
■Since the messages were ^uite long (more than 10 letters per aolumn, 
as it developed), it was not difficult to anagram the first ones 
indepen entity of ary assumption for the key length, letting the 
plain text as anagranmec delimit the columnar length* As a result, 
tho he;.* length developed as 15, and the Uth and 6th groups were 
left ever as "buried" preamble or indicator groups* 

As the traffic of tins circ_t continued, the significance 
of the htii and oth *i*oups be cane obvious* By means of the 
-a ilsc iluessel: 


Alii 3IQH3SRC 
123li5673?000 


Jl‘ C J ' e .! tC ~ S + ,° 1 ' Ulese 2 groups wer; success vel;- ice rbered to gi vo 

( v ri ? urea ^ th « tine of encipherment (U s 

ThiS'Ke' t - ^ nUDber < 2 ^eure 3 ). a key number (2 fibres ). 

“he -nc_cctor croups A K A Q K, 2 C X K A would indicate: 

Day of month 15 

< Tir,e 1600 

Message numiier 05 

Key number 51 

an , ? * 6 continul n£ solution of messages of tills circuit developed 

tv ^ USual cJld -^Ehly useful relations lii p between the various keys 
be -^ SGOTOr0d ke ?> for exanole , for number $2 would 

kevTinho ey uropping the first letter from the literal key for 
dcL?^ I '^\ a ? a addlne a new letter at the end. It further 
77 , n 6 r/ere onl ^ ^ such keys (numbered from 11 to 

Z 311 numbers involving 8, 9 , or 0) and that the 
Z\rJ£r k 5i rs Progressed similarly from 17 to 21, 27 to 31, etc, 

.v'ere f k % Tkus ft ’oecame obvious tnat all keys 

_ - 1 oa -ron a 1,9-letter literal key which 7 , as '.vritten into 

jo-ordinately numbe-d arm 1 to 7. The key numbers 
were to ^ ®. oar ' fc ing point from which lp successive letters 
■I pSpL form tne individual literal key. Eventually, it 
a r- ° OSS1 Dl f ^ generate ('with but few anbiguit3.es ) 

£co ^ b &: r6latiVely ^ ^ 



„ 40 derive cert£in ° r “' he growing letters 

■"JVV 9 ' ? se?aen “» tat enough >,ere recovered to 

-n_o-.e w* nature or derivation of foe busio 1,9-letter sequence. 

i.VIIs ..ere inserted info the plan text according to <he 
nuner-cfo key for five lines, t en reflected s t-tv ~-t ■ 

" “* liCcess ^ • The Zanlscnluessel was also used to 
l n^.aoe nunc-ers m the plain text. In addition the mil. 

..lemselvcs conveyed a neesar'e. For *» amle - 

° * . o* -v.arapie, «. recovered message: 
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r-\ 

CM CM 

<M r-v r"\ 
H H H 

<"> r\_3 _3 
«—4 H 1-1 H 

eo i— vo r— co 

OHO (NO 
»— 4 i — * (H H 

co r— r — mo uvmo 

C-iOUMAHJ cc\_i“ 

VO VO \r\_s_ct ncor^ 

l/\Xr\ \c\\/vLr\vr\ wuvxrv 

H i — l t — 4 rH iH r — 4 i—4 i — 4 i — 4 
'O'OC-CO C- MO MO 'Lr\_^'LT\ 

rlrlHM CM CM CM r^v CM i-H CM 


o o 



Hhooohhhhcmhoh 

* 4 H i 4 i 4 i 4 i 4 f— 4 i — 4 r — 4 f — I i — 1 f — 4 I — 1 

vO t MO r — C— CO Ov Ov CO CN CO p— CO 

OOOsCVcOOvOvO O O Ov o Ov CO Ov 
«-4 r-4 i—4 rH r— I r— 4 

Y) )f} 1 £> 'O -3 -=* -=?■ -=* -=f 

HrlrlHHHrlHnr r—4 r4 rt rl 
0~V CM CM C*\ CM CM CM CM CM CM CM CM CM 

vO VOW vO VN-S n (r\ 

— 5 _ct -or cc\c-o rtrun 

f— 4 i-H i—4 f— 4 (—1 f— 4 f — 1 (—4 f — 4 (—4 f — I 

CNCTVCC co t'- CO CO o\ 

CM CM CM CM CM CM CM 
r-i i 4 t — 4 r — 4 ( — I i — 4 r— 4 

i— I i—f r- 4 i— I 4—4 i—4 

r-4 r-t O O C\ 

H r4 rl H 

CM rH iH CM 
CD CO (v- 

r- v£ 

r-4 


-J — ) 


< '' 

>1 1 


3 / 


r—l OJ cn_ofVAv 

r—l r—4 i—4 —4 r—l r 


r- iH C\J 4^ "IfN vQ Jv. r-l CM 
i-l CVJ O'. 1 C\J CM CM CM Cm* cr\ 


9 11 1 12 6 Y) l 5 7 10 


/ 




k C*~\ 


hho 

H H i — I 

rH O O CK 
H H H 

'O'OXAIAXA 

UN tA \r\ \rs VPV \Tv 
^ HHHHH 
00 r*— co co r — r— 


sx> f — 

. vO 'O 


, X/W 3 " 


CA ^ 


fO ^ 




- CO CA 4 


O O r— l °° rH rH 




CA 


—J zt z> rr > r '"' a a 


SoD ' CO 


c , o cr. o £ p 



"•^OlAl/VXA ■ r\ UUAJ ro cr\ 

o\ C\ co r~ p~\o i — t — \o vo \o 

S 3 » 3322 Si 33 S! 2 iS! 

ACMCMCMCXJCMCMtMCMCVICMCMrHrHrH 

^ ^ (H rH rH rH r—4 , ( t | | | | ^ 


o 


C\J CM CM CM CM CM ^ 


Csl CM 


OJ 


M3 


-M3 


-CO CA 


* 

& 


VO 


vrwo vO vO vO tr\vo r— 


vO I- 


co co 


rlr^H 


— *“-cf -ct -3 rA-cj _=r .^t -a- _=f xrx'co -=* 


. M \r\iA 


MV YC\ \A •LA -UN \A XO \A vr\ Xf\ \A AA "LA \0 


u \ u \ U\U\ UAU\U) 

rH f— I rH rH rH r-H rH rH rH 

< Q*^ r-C 0 C 0 C 0 c 00 NO 0 s 0 s 0 vOf-tOr-t 




HO rH rH rH rH CM CA CA -H 

rH rH rH rH rH rH rH iH rH rH rH rH rH rH 


^^d 29 ciHOOvOvcOOv 

n 


r-i w r— \ r-fr-i rH CM \ * T A — . — i - 
H rH »H rH |H rH H iH rH rH rH 


2222 w^^nhho 


OO^OOOOHNCvmn^ 

— 1 HHrlHHHHHHH 


co Ox co co co co co f-vovo 


OvcOO\OvOsO,Or-trHCMCM 

rl H rl r 1 rH 


f tAiA'iA.-a'LA'LA'LA'LA 


OsOOnOvOnOOCNCO 

r-H «-H —4 


rv~co r*- a- a- r- vo 

VAvOlAtAvOvo^** 




hhh .-(ThThThTh 

'O'O NNN f'-COCO^ 


n r\ r>^ n n (v^ 
H H rl rl rl r( rl 


tA LA lA lA tA 
rH i — I H H r— I 


CA CM CM CM C\l CM 

H H H H rl rl 


>0 N'O'O 


CM CM CM OJ CM 
LAlA VO VQ 


hho 

hhh 


rH i-H 

o 


CM rH 

r-H rH 


t-flO 


« L 7 ™ n-finv 


CA OA ^ ^ '- 




Ci 


'6l?4DiaHHSL|l 

(72FISART Hip a S A R T 
n E r 11 I Tl j a 0 T @ T 2 L II 
£002 R HI R 21 M 3 r 0 
R B P- i t Cr a i ;-i a h . i :i 

E II A H A II N 2 I.' A II A I 3 A 

I e(Jf O R ]J(T y c A i. X Y 
T A T H A T(gi A 7 r. I A Y .1 I 

(5 T H II A N 3 A II (R II A 4 u 3 

ht A S(J A1ISDAYBRI(BT etc. 

The nulls spell CONVOY NORTH AB KISR X AB . . . . It will als° 
be observed that the letters in the first line X R • D X when 
substituted with the Zahlschluessel givo X 0 9 X etc. 

7. 5-C HWOURO-AHKARA 

baring lyhl spotty traffic was intermittently intercepted 
fi*om tills circuit. The circuit used a twenty— length key , 

1 7-9-l-l6-12-lf>-10-13-5-lh-6-lo-2-2 o-l 1-3-U-7 -8-19 

•vith die customary preamble concealed in the first four groups o- 
cipher text. The Zahlschluessel was 

JiiiJiGSHTlIEFSiiGSUO 1 T 

1 2 3 h . 5 . 6 . 78 . 9 $ $ . . 00 .. 

deception was very spasmodic on tills circuit, and as a result very 
little traffic was received for solution. 

5 . h-I i 'JJ-: HURG— BCRD3AUX 

traffic received in this office in the month of June, 19U2, 
was founu to be enciphered in a simple transposition system usinp, 
a sixteen-length key . The preamble was concealed in the first 
four roups of the cipher text, and an extra ;roup for date check 
J. f Encluc'-d : s the fifth croup. There was a separate key for the 
fifth roup date check. Nulls were inserted in the transposition 
aia-jra-: according to the key in the manner previously described. 

• h-H -lAlGURC— T J!fiCN0'.W 


new 


In^ September , 1 9h2, five messages v/er 
station w.'iich sounded very imich like 


e 


intercepted from 
isnburc. The 








*•!» J|«CU 




:th 


—3- a -, - ^ count iraicatin^ transpositi 

cev. ?Z~ T* ' rannea and fcr,r ‘ J to u_e the custLary 20-1 en:, 

- n *" Saces TOre a wamin: from Haaburg concerning security* 


oT*t ^ c <* *» ■attllji j iron namou. 

Gnuie ^“ + tn£r trai,f>ic ever interce ,teJ. The first four 

were naerted in + hT J®** COntaincd ti,e P eanble, .nd the nulls 
!WEfer.cal key. ^ tran3 -°° 3i tion dia ran according to the 


h * L/S &Ji. J'lTErl 


1 . U-G 


PORTU^IfESE HJII.5A 


lt,T drj» r «UH' 1 )ql ’ * >utlon usin^ th» constant call AX7 and 
oall s war- *V USin t changing calls were Intercepted. The 

r round to reoeat < . _ - 4 ffic sent 


calls w»r« "c changing calls were intercepted' 

or, t*ls eireult^m 0 ^ a " or '<-nl y cycle. The tral-- 

p pr-rblw r, in fiy c-letter groups with a letter check ?s 
det-r«l W d*to be^the^r^tor ," 39 ” ai " inffd . th. tenth group was 


Tims 


ABCDEFOHIJ 

1 2 3 I. !>6 7 0 9 0 


A 3 E A B 

12 5 12 


indicated that pa^e 125 of some hook wac to he used for 
.„ *! . * n 8 fr9l l“ency count was token, the cipher text was 

hil, .• t0 06 Spanish transposition with nulls, indicated by the 
l requency of tne letters K and W. -he first significant 
phenomenon notea in this traffic was that ir practically ev-ry 
the first cipher letter se^znea to he a null, and if tne 

v/th ,f ' e *" ras fair len * tn » tf *e l?th letter, the 23rd letter, th< 
, ' etc. also were apparently nulls. If tha message was short 

the space between these apparent nulls tended to decrease. The 
pat. em showed a tendency to repeat in very Ion' messages after 
a ^° J ^ ^ ' letters. This indicated encipher rtar.t in blocks 

ul some sort. Two messages were discovered which had the same 
inf inat.or but were of different lengths; these were written out 
.’n col airs of ter letters eacn for twenty columns: 


_c3zar. e 1 


1 2 3 U 5 6 7 3 ?DILE131U]Slb^fil?2D 

1 KXxrXGSEGZTKDEAINXOK 

2 TXAXNTEAT .! !! SXCEARLNA 

3 S07XNCD2DSE0YXERCKAE 
*f AXXXUECRISALOVNETEUN 

5 XASEE2 IilSRAXTNWJfNOOF 

6 JCXRNXEOXITZOOAEDHUS 

7 AfSGZRCXyJIRTXIKTGZXAE 
° lEJJXSUDSPAERRXEEFFAS 

9 S Z S S T D R I ? X B 7 K A O S O XI A 
10 CMEXSDEOPZMATAORNARI 


^ essage 2 1231*5678 9 30 33. 32 3331*35 36 37 38 39 2D 

1 ZEXCSXCXU T Jll D G L PN 0 O V 

2 irsexresetboldnvqoee 

3 UNJACAAi; IDUNJUFTTuEN 
h DNLEUNVSI COXRTNPXEEG 

5 aAGPWTEAGSXIONZZANXE 

6 LSXDGRIIjiNOEITMXCVAA 

7 00IKXA3GCI 3R0Y0AKXXT 

8 IEMRCLRXAQXOkXBRAAXE 

9 EXPCXXNUYESKXNEXEEKR 
10 RMSXSDANUZBADABRAOOI 


tha^+b^n V- 6 ,aeasag ® s • f ' or nu -*-l s 'which were obvious, it was noted 
i,e. t S n cx * c * columns forced a diagonal downwards. 




Message 2 

1 

2 

3 

h 

5 

6 

7 

8 
9 

10 


©2XCSXCX 
I R 5 S X H E S 
M N ©A C A A K 
^ M l E U IJ V S 
E A G P©r 2 A 
LSXDGRII 

OOIEXARG 
IEOCLR A 
s x P c X X N U 
H m s x s j a 


u tQh d g 
2 T 3 J L D 

I D M N©U 

1 c o a a t 

G s X I 0 u 

2 N 0 E I T 

CIS ?. U Y 


© 


X 


- A 

A K 
B A D A 


o A 


L P H 0 0 V 
N Y G 0 E E 
F T T Z E N 

;; o y ? f p 

©Z A N X E 

mcvaa 

o A©X X T 
B RA AXE 
SUEKR 
B a A 0 0 I 


tne even columns formed a diagonal 


upwards, 


i «c • , 


Message 2 


izbxcsxcxut., li d a l f :: u .i) 

2l3SEXRr; i T B t. L U N V G l. E 
3 U iUACAAGl JliMJUF T Y O & N 

« H L £ D SV - I C D A R T N - a E E G 

5 a A G I> ?/ r £ A G S X I O N Z O A M x E 

O L S X 3 G R I I E N 0 H I T M .. A V A A 

7 0 0 I © X A R G C I o R C 00 A K X X T 

olGMRCLRXAGCu ; B R A A X E 
9 E Qy i> CXXKDY „ E O X U EX EEK R 
10 R i: 5 X S D A H U . B A D A B R A 0 O I 

boca; ip SVerS ^ n ^ even c °l u nns, the two diagonals of nulls 

oeca.ie ver;/ apparent: 


Uesaaf . re 2 


^ . ? sa S e . 1 12 3 lj 5 b 7 8 9DIL]213Ji;l>lbl73Bl'2D 

1 03 IT XXXDNOGZ0ADAARNAOI 

2 t(2)a s ndeitxuQxaesrxna 

3 S ii©X N U D E D A E R©X E E C F A S 
U A S X (pU CCQI RAX , 0H G T X U E 

5 X C S s. Qj x I0SIAZ10© A N N 0 S 

6 H A X E N© 5 IT X R T X 0 N A ©D 0 U F 

7 If X G X R E © R ISTLIVTE©EAN 
OIONXSCD ©t 3 E 0 X E R F © A E 
9 S X S X TTRA©UESNC0A0L<2>A 

10 0 X E U S G E E F©U K T 2 0 I NX R© 

12 3^5 6 7 8 930112 33 lU 35 1817 £19 2D 
1 Zj M X X S D C N U Z@A DALRN00I 

f ?, 9?A C x x E U E E E ©L fj N X G E E R 
3 -J E ©R C L A X I G L! 0©X F R T A E E 
U D 0 L©U AVGIIORR ®H A X X E T 
$ * s G D (J)R BIGNXEOT©XAVXA 

6 L A X P G ©I A E S 0 I I N M©C N A E 

7 0 W I E X N ©3 C C S X 0 T 0 P®3 X G 

8 I N M A C A R©A D X 1J M U 3 T A(1)X N 

PERPEXRNS © T SOXDEVEol)E 

10 R E S C S X A X U ©3 I! D G B P A 0 0 ® 

TMs oetermined the size of the rectangle ae twenty letters in 
naa^h, ten in depth. In t.ie diagram of message 1, it is noted 
tnat columns 1 and 2 form very good Spanish or 1‘ortumese di- 
graphs as they stand. Taking these as a startj “ ^ 


Column 1U (fron 


laessage 1) is then added: 


W'J A' 

t(Da 

SEX 
A S© 
X C 0 
MAN 
M X V 
I 0 X 
S X c 
0 X E 


i ie sane columns are then triea in message 2: 


1 2t 

Jz) a 

I©N 


HEX 

D 0 © 
E S T 
L A N 
ONT 
I N U 
E R D 
REG 


zoih messages give good trigraphs Trhenanagranned in this fa 
lolunn 17 is then added on: 


M-ssa^e 1 


X 1 


1 1 

1 2 1* 7 

V»s?a -e ? 

1 ? *i " 



CZrrx^ 

t©a r 


X © N 3 

3 5 X C 


:i s x t 

A S©T 


a cot x 

X C O K 


£ S T A 

‘i A .V n 


LANS 

a x v© 


0 N T© 

I 0 X F 


I N V A 

S X c o 


ERl'S 

0 X 3 K 


» F Q A 


TTie c "rr'pleted rectangles s 

Message 1 * R®U II D O X D U X N@4 OX O i 

<3)s T®A RX>. ADAXSSHXINTS 

HSSiX 0© A®U S A X D B F S K D S 

XGaS©T0UXC2H©GAX 1 AN 
ZEXCONTOSXSIRIAN )©S Cj) 

X®M A !! D O II X ©F R 2 E T 0 '.T N X A 
LEMXV@IAGENSX©TSR«tIT 

ORioxFrtANcaaxu a@©s ? a 
S A S X 0 ON ©3 TAyXHaLAT ® 0 
KIOXENTR a 3@©U E M X iSH 

jfessa^e 2 A 3©il A N D O X UI Z X C®0 II S 0 L 

®X r©NGLSSXP. EOEBS’JXEN 
OHi'iJX T@E©T E 0 A A V. A X 0 I F 
?. A D 0(£>X U L A T t@v 0 X ■» U T N 

E X S S T A 0 X 3 R A N D S X V T 

I © LANCIA X©E S F I 0 M A p > 5 fA 
X ? 0 N T®0 X I K 0 L E®8 S S X C 0 

N T I N U A H " A N D A R Xt^)©C A B 

OVER D E X ® P R E T 5 K S 0 3 X0S 
MPRS3AD0S X®©C ABOXSD B 

Both messages had remainders which were enciphered in the same 
key in a separate block. It was found that long messages were 
always cut into rectangles each ten letters deep, ar.d eacn rectar. ;le 
transposed as an entity. The indicator was found to control, by 
the first three letters, the page of the hook used, ar.J to desi 
oate the width of the diagram by the last two letters: 

A3EBJ 

1 ? 5/2 0-20 length din gram 


VSCflff 

1 


u$ 



Sino^ the width of the rectangle was a constantly changing factor, 
P-ated keys aelclora occurred. rhe use of the null", both in <■“* 

, r3 themselves and their posiMon, proved to be of great help 
in re^ iinc t „ e traffic. 

2. U-C LTSr' l.-LOURENCO MARQUES 

in the seme month, October, another circuit displaying 
si the same characteristics as U-B was found. This particular 
circuit used the constant call UU2 and the answer station a seri - 
o c landing calls in a monthly cycle. After solution of circui 
*-B, the new circuit was examined for the possibility of Portui.u- 
rH 'Sposition. A frequency count indicated this assumption to ® 
correCv.. Like h— B, there was also r hi*h number of the letters 
A and *?, indicating nulls. An indicator was found in the eight 
group*, the middle three letters of which were always among the 
first ten letters of the alphabet. Tnis suggested the fasiiltar 
method of designating a page from a book to be used as a key* ir: 1 ’ 

ABCD 3 F 3 HIJ 

123iib67o^0 


Triers fore , 


X A D B S 

. 1 h 2 . 


would indicate page llj? to be used. Also the fact that only thr o e 
letters of the indicator group were significant led to the con- 
clusion t.iat only a page was designated by the indicator group and 
therefore a constant width was probably employed. A letter cneck 
of the cipher text was the only preamble used. In a message °- 
di> letters, taking out tne indicator left a total of dO letters 
to be used in the diagram. A key length of twenty letters was 
attempt .-d at first but no result was obtained. Then different 
lengths were triea. .fhen a length of sixteen letters was em- 
ployed a phenomenon appeared which proved that the right key length 
had been attained. 


1 2 3 U p 5 7 
1 ®~0~ 3 £ H K 

? i ® a p o y x 

3 3 1®K MAO 

U A 0 B® M X I 
5 x 0 I 2®C 


1 1 1 1 1 1 l 

8P0123U56 

£ ® ?. C i X D F 0 

0A®N£c.XCS 
H0UXL! 
r*il 0 ® A L!aG 
UU3AX©HBM 


* 



// » , 

obvious nulls fell into diagonals wnich be r»r. on column* 

‘ ‘nn 9. Anajra.ininj was then af.empted, start' rv w< to tn« 1-ttor 

W or. ii ne 5 ^ col inn 7 . ** 


A'loir j column 9, 


7 

V 

X 

0 

1 

; 



X A 
0 X 


I -1 
4 » 


Then column h, 


7 9 h 

pTCgTs 

X A P 

on 

T '2© 

y u 8 


It was found that jood t.rigraphs resulted. Anar ramming 
centi Tied until the message was recovered. 


11 1111 ] 
80H 2 6 5 1 6 3 5 3 7 9 U 

£ NXtrn 0 X 'P 0 V(Sjs fl 

C® A X®F OF©E C A X A P £ 

NA S X K A n* © I A L © 0 X N A 

lilALOXifOCAMBI 
UEXyOC®AW©BIQUEX 


wa55 


Vien 


However, only in rare instances was a completely filled rec- 
tangle sent by tnis circuit. The diagonal insertion of nulls 
jre iti.y aided solution in cases of incompletely l illeci reotan T les. 
For example, ir. a message of 2?5 letters, u could be let.* mined 
that, there would be thre« long columns of lo letters and thirteen 
columns of 17 letters because a constant key length of sixteen was 
always used. The message is written out in a diagram «itn toe 
three long columns at tne left hand side: 




1 

2 

i 

L 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 


* » E A E N II 

nnoi c 
s T I I K u i 

X S A O E T X 

S A T S L Z E 

P E X D I A K 

E N U X D S A 

R A 


X J 
W N 

x a 

A T 


T X S A I 
O E X A X 

0 C X A T 
VKUKV 
S D C A S 

1 3 O E A U D 
X A N A N A X 
N K P I A 0 R 
J S P M T R M 
K 0 U E O R C 
0 M X 


0 X 
x a 

1 u 
i u 
a c 

A U 
.i R 
K A 


3 I 

I a 
y j 

X .7 

II R 

i: v 


R E 
I X 


IT T 
K R 

I T 
M T 

II R 
A S 


The text is then inspected for obvious nulls: 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 
11 
12 

13 

14 

15 

16 

17 

18 


!&M>o e ? o“ S 

SIII0UEI 
XSAOETXI 
S A T S L©E S 
P E X D I A © A 
ENOXDS 
T X S A I R 

oTTITT^ 

G C X A Y©N C 


aO a H I I e c 

U T©I S F R C 

U Q X 0 J A S A 

U Q X X ©E R E 
CASNRDAR 
USPHVYoX 
d A N f A T T E 

A 'i* M O X X A (K) 

P V b : u- 


V N N® V X S S 
SDCASAIE 
IRUEAUDF 
X A N A N A X X 
.©P I A 0 H Cl 
6 r LI T R M C ( 

OT'rJ UR C (J ' 


0 U X 


P X R o 0 3 P© 

Rgdi a a©a 

E C X A©@E E 
N OR© - I T E 
X 0©}. R x N 0 
t © : i n e i 
2>H x X T R V 0 
©R E LI R X 0 C 
1 X A S X U !I 


oince previous 


?he nu22s are found to fit into a definite pattern 
experz ence demonstrated that the diagram rust be 16 columnVin 
v.uath, ana that the nulls prqgressed dor/nviards starting in colunn- 
1 1 * \ Zne H P ro ^ essi °n rnust oe reversed on line 9 starting 
” 1 ? Bns 8 10 - Colunns 5 and lb can bo placed imoSSw u 

ZZ ?Z1r itim be “ US ° ° f thS d0UbL ^ on 





Column 1 must have a null on line 1 and nulls on lines 16 and 17 J 

1© 

2 X 

3 s 
U x 

5 s 

6 P 

7 E 

8 T 

9 0 

10 G 

11 V 

12 S 

13 I 
ill X 

15 N 

16 © 

17© 

16 0 


1 2 3 h 

X C> 

2 cu 

3 

u 

5 

6 

7 

8 


5 o t a 


o°Q 


'Q 


C> 


Q s 

Q 


c 

c 

A 

E 

R 

X 


Qe 


9 

10 

11 

12 ( 
13 <D 
iu Q 
150 
16 
17 


SJ 


* Q 
'O 


<D 




0 

I 

0 

c 

N 


finis, by counting off according to the null pattern, the diagram 
can be Tilled and tne three long columns found: 



12 3 1* 5 t> 7 8 9BU12 133hl&3b 

1 @2 K HUBS C©A I a A I S C 

2 X©3 X S H N 0 ;<©v BIFRC 

3 S A ©A E I C X U , ©I S A S A 

U X S I © O U E I O Q a © J D R E 

5 S A A I©II I U vi X X©D A R 

6 P E T O E©2 S C A S N R©2 X 

7 2 H X S L A©A U S p a V T©E 

8 T X U D I S A©?. A N P A X A© 

9 TT a 5‘ T "B~ K A © A g 1! 0 ~ X S ; ■ © 

0 G C X A I X©I P X R S 0 A© A 

1 V N X A X ©N C R G D R 3 ©3 E 

2 S D N A© a S S E C X A© I T E 

? 1 R C©V «.TEKOii©iXNU 

* 2C A©A S U D ? X 0©K R X 2 I 

» ii.© 'I 2 A A X X T © C 1 T R V 0 

> ©S PAHOB CO?. X U T X 0 C 

1 <00 Ji i A r 'A cQk a u Ii x h N 

0 T & 


placing the three long columns together ^ 


good tri graphs are noted. Then by anagraoning the remainder, the 
message is recovered: 





f 1U » | J £ , | I A&U 


s A I nC)F 0 It M 
«SSI : A X 3IW* u^E x 
JX JU S D I KUP1 ^ w ■ 

© 5 ©X A A 1 A x A 

K i J li ©b © 

L li V A N i' ‘ 

I r A s x XI 
D 0 X R ii i)©! 0 

r o o x c a i©s x 

x v b©:;®c b a x 

®s(D\ D I 5 TAN 
V I T A R A cl N©C v nw l A v 
S X R U A X F rl K © 0 X A U© I 
A T A©;t XVI NOl b X C 0 


4 U I x X 
i Si N 'A' A c 0 ^ ^ 
* .> ©IJ x S U ^© 
i ©A i J U A It D A N 
i ©ii o £> T A X A M 
^ - X V A©)R 

GRAND 
C u A S X 
0 


/A i < A /A \ 4 ^/ . v 

N ©T 0 :i X 
A©R li 0 X 


x a o xi 

GllU 


n:©AKXO 


: CP' 

« & I 


3 U 


c. STUTTGART CEVT&l 

J * 4 "^. STUTTOART-LIPYa 

0*11 18*8, a circuit wn 

Th« traffic .^nt h L 00ntrol » changln tQr=epted which used the consta^^ 

- '« proamble, a ,' thla station was nr f S f ° r the ansW9r station. 

0 Orman tron*A 0 alM th ° traf Tic itself ^v '^ ac J ed a letter check for 
several days 1 n ^ ton * The control a frequency count for 

tenth groun ? tn ® n ty-len r th vl * a messa ge of 206 letters for 

b«e«„.f 5 P t£^ HE > Wa3 oelectS as%eT aS ^ ied on the -e-age. The 
tho Tact the? ^ “>« letters were ^ S ^ indicator 

unod, qru.' ' on ly letters within th ^ n ^ ed 1° the groun as well aE 
Tho message was written^?! !*L st ten of the alnhabet wer« 

^ xn a diagram: 


12 3 4 5 6 7 

, 1 E A A A L 

l A >•• T O 3 L D 
A T L R 3 R E 
THSSEC 
NXE 1010 

E R N u L R X 
B IEZ DEN 
KSREUSEi 
E I M E X G L i 

IRTHXH! 

U E A A A L A ( 


112 
8 9 0 
E X N 


IN TNEU 
BEIENE 
E G A N L X 
Q K R E R U 
U IT X E E T 
XXGBXN 
ONLHUH 
DRSSXU 
S H R T N M 
TXEXNP 


^oo'fS^raphsj th ° n attem?ted > notin S tha " columns 14 and 15 fo rm 


3 I 

X 

3 

T 

1? 

.j 

I 


T? 

• V 

JJ 

X 

X 

■/ 0 


T T 


Si 






13 wzs then aided: 


b i 
I 3 2 

T 2 If 
IQS 
R 7 E 
I I 3 
g 0 H 
IDS 
E S T 
T T I 

< ? •> a 'jO'* 

H:wevar, nc ether columns were found to add to this — -- 3 t v .er 

Ooing back to the cipher text again, it was believed that ^ :g r 
grocp night have been the indicator, tot this produced no - , Jja3S usl- 
resolts. Writing oat the cipher text in cclnnns of f i ve » ' 

phenenenon was noted: 


12 L s e(£U u a aQa P. 1 >:©L 
2(g>z b k dQc p H p© 


etc. 


4 

Heading the letters on a diagonal, it is found that a g ' 

word is spelled out AiTIKWiESELLSCHAFI. Deciding that w . ' 

letters could very well be nulls inserted in the 

were not considered as part of the co liras for anagr a-"ri - 

fitting a Z on the combination WO and a G on the conb^nan. -* """ 


0 T T 3 

1 B IK 
N X B E 
ETEK 
L I Q 3 
G ?. tt 3 
0 X I B 
Z 17 0 I« 
Z X D 3 
3 S S T 
G T T X 


It can be seen that the bottor. line ana^rar_rjei out is n^t prodtucing 
pl.iin tent, and that the arbitrary line above (0 T T !) froa the 
crown di&graa ^ives a possible plain-text ccr.bination. Confirming 
the anarrarrinp process, the complete nesrage was recovered i 






/ 


1111 1 
1 1 70448556 
ARXOTTE.RXO 
tgelande tx 
jNIHXBERLIN 
,'FALLSGERAS 
B E R F 0 R 
js y E L D u 

MD UTS 

;L L X U H R 
jlf E ?I D A H 
IFAWnl 


D S R 
N G X 
E X G 
U L L 
X D S 
I E R 


B 
X 

T 
I 

P. U 

X X 
’.7 0 
X D 
E S 


I !! 
B E 
E N 
3 S 

g 

B 
N 
S 


1 

7 8 
G U 
G E 
T 
U 
T 
N 
N 
U 


It was further observed that the letters considered as nulls were 
actually the literal key for the transposition — AKTIEN GFSE LIS CH ATT : 

AKtiengessiischaft 

1111 1111 1 

117044855623639278 

The indicator in this particular message 


A H A H S 
18 18 


contained the length of the transposition key twice, in the first 
four letters, the fifth letter being part of the literal key* On 
later messages the literal key was inserted into the cioher text 
in the sane fashion, and it was possible through this knowledge to 
reduce reading messages to a purely cryptographic process. For ex- 
ample, the key can clearly be seen: 


A A T H ? 
©S R R 
©D V X H 


P®E X U 
A®R S I 
A (l)?. E L 


L X 

U z(£)s T 
R E©0 X 


R I S©I E T L X® 

A P S(s)o AH~AH(E) 

L D X®0 X N E I,® etc. 


02 • Sltr.Ld TRAWSPOSITI JI«: C0M3S 
1# 3-F COLOONE-HTO DE JANEIRO 

loK-i rra f;^ c on t.-'Jis circuit was .first intercepted in the fall 
th Zv+ a obviously transposition, it dia not have any of 

m. J ' erna characteristics of the columnar transoosition systems* 
n ? f nc ipnered preamble or indicator and the usuil preamble 
- 7 a e .7' er c,iecic * Th p call letters changed daily fo r ' each 

'■ ' „ '* traffic continuer ^ it became evident teat the call 

an7 ronf f" +L* * odicator for the date of encipherment which was 
apparently the controlling element in the selection cf whatever Key 

thf This dis c3o S ed by the fact that frequently, In 

i eamble, the letter check was preceded by th~ee letters wh^ch 
were invariably the call letters for the originating station one 
ay or more preceding the date of transmission. Although nulls 
^ r f > a PP are p ] " n the cipher text, there was no apoarent symmetry 
r homogeneity about them or their position. All’ attempts to 
na^rrirn ^nem or single columnar transposition were unavailing# 

Ev^ntually J one significant phenomenon became apparent. In 
cas . w ere a series of messages in the same key could conceivably 

* : U ^ eS ^ Ve s f ctions of one long message, it frequently happened 
that the first letter of each part after the first was an F. It 
was invariably true that, if one such part started with F all 
succeeding parts did likewise. There was even a ?pecial“case of 
this sort where four such possible continuations all started with 
to. This suggested that these were actual continuations and that 
the usual stereotyped beginning for continuations (i.e., FOR.TSX) 
was being used with typical consistency. 


In the course of studying the cipher text of individual 
messages, there often seemed to be at least one case of two seg- 
ments of cipher text forming very likely digraphic combinations 
when aligned. These alignments on occasion even seemed to produce 
reasonable digraphs for a distance disproportionately long with 
respect to the length of the message. Furthermore, it always re- 
mained impossible to expand such alignments into plausible tri- 
graphic combinations, or even to find two logical digraphic align- 
ments of equal length. 




i 


1 )' 


' /t ■* 


m 

g 


I 


I 

I 


I'";' *rn hi*.,,,,, ' V. wmn » 

*?V' *h*rm „t\ t" . 1 ' ' n%> ,( i "***"♦, tt>>i TiK '*’>“+ .<*■' 

Hr*} Kno ,, *,i ,w,iZ» rl * (''**»*'"' «**' 

“l hri „ trtj M r.,,t f . * ,rm K ' tr '*' 1 Hormuff , «n»<. t" 

Qrl.'inm t lUrtl/v .'Anil ' ‘* n **t« mxtoMor •wtjuiA tr* 

Jv'U'tlw* ntrmUhiS or It «:?/""! *' r * r ""^l *" *« 

1 fir D tfoo<i trl 'r*!,riti mitt t '*! * ' '**' 1/5 b* 

**Qjjin/f« nun fo’irU which r! ?? , Uwt * '.out 5i 

U>r^ column* when u,«„ # *-• «»• • n^rmaat of 

thi « p»^t, fch* r « ;j::y ‘'T'’" V/ * . »- 

h fWit on or whut tunilA ho ' s// " , !' l " , '*>y h'wiihwt ott, *r/> 

C"J u.yjrj nun on Kho J*f* , /P) „ K i,iain *'«**' l hr* IOUK*»t 

Crow, i^rt to riff ht, ’ '/T r '* '* <J * m * kronroon lv*J/ nn ortor 

romlnwri hum, in „ " * ,r * *** *«try*d in or* ooi mu it 

J " i,imn u> th * rtWt or u*t point. 

Wl-th thoao art Korin t r» #<-, 

W9rm hrUi t'.rit!TM,o<) Iri oh v *’ <'«*•»*<** oKt»rl\rnc 

rt y-‘ r oK urxi iLmlturoonnly ox'untt' r ° 1 ' the i*ttru\tn,' 

(lh» fact that th* ^ i'l»tr t**t. 

no tho nmt oontimiMt l ,, r I'm ” ' m *** ( ' # w ' ,,, of war'w 

O'- U» Pl.lr, Uxt '■oil 


;«fc 


it V,flt![Uv^v"rtht. n t r r, 'f »m« w)*,,, of 

only i n tL il) ll l ' r r, ' n i.^ fl 

of t.h* -V, e»ar/,r v;,n~n. 'n„! hw/of^r 0 " I'OPtlor^ ill, V,- rv t 

mortsin with tho tooth oxtonhin/irr „o TT Wiyl 

^^oription b*»n L L , [ ! r th* rl.jht. 

*T ^wriptlon fia-j b^n v'-ruX, 1 ” Tm '’m ln 

revorati cl — Accordin' n, P h ^iMct and noma- 

for oi oh mnuP 'e i n thl« «wri^ ' "TrwTl?!! TH 1, tp;n,! ; ,0 »^ion vrj 
numerical key had henn <l«rtv*ci/ *»,, rer.S7\ ^ ’ fr0ffl which thi » 
ar,J i^ovrd to bo Kn^lith — which m „ (1 ' ult _ f ^i'ficulty 

° r ‘ /,,rw ^rom thn Bible, etarMny witr, am ' /l t’ r ' 4 Uy th * ^^.inniru; 

rsdrvery of the literal key, it tmcS * Urt ^ p ^, u;,on 

"!. C wwiv* tontn wa. e M uai to the , lu <n4T 0l ' 

of A lP . h «a:o.-..,fv'. J of, tor of t he literal key.' —'ill iL:^ 4 . 


/ 




Sis? jss “ .T* 

th- o 4 ,i led the direct! n^ 0 *®® obvi ou 8 that Was deriv ed from 

lu " n ’ ld ~«rSo. b ** n tran *cribed £r£tlyf ‘ 

The foi i 

fc ion of o,,„u ^ ln 2 diagram »•< 11 a 


-/• — ~~^j 9 on— «veii- 

The fol l ■ 

tion of such « ** di *gram wlll , 

comb from a literal *" exa ™Ple of the genera- 
I N D rr Jr * 


stria 
2 2 1 
0 1 ft « -, 


D 1 


? 0 A N I 2 A 
1 112 
9 6 2 h n a ‘ 



N S 
1 2 
5 2 



fer %*-: 




Portion e o rS e ri/ OUld * inscrib * d noriaontaliv i ♦ 

der of th<- diftjjraai. Nulls would be u «;or, . into tn» outlined 

or two rows" 0 ’ " hicb the message eSeHno tv, 11 ^ ° Ut 1 ie "~ in ' 

colurans and ’ n Transcription would be dowrA-ar, foUo " lr k: 

Af ter ds for the even th * oja numbered 

^artirdar^ keyS > two characteristics 

or months Cal1 let ter s were Sker 1 ^ th ® 133,10 fr ° m 

call day + 10 (l9Jill x pn pase * 30 x number 

to inn* + S tilUs indicated thAn + (i9U2); and second, that the 

■m a , diCat ® a date °r encioh« h d * te > bein S inserted in the preamble 
nussinn. iiteral ^ey Ss th different from the date of trans- 

the numerical kev wa« a . e ^ lrsb 26 letters on the pa-^e, from 

dirrr+ rih ii nS the colum ns, the 6 ^^ the C ° mb ^ enerated * In 

h« + ° rder * the eveTnimbe* ^ numbe ^ d ones were taken in 
h +°r, ed by tne conventinn° ne ? ln reverse order. It should 

of ^I ke i n ln ° rder to P^ovide^ 26 ° f Ht^ e 5ystem * 26 letters had to 
° f letters might be th 1 Column k *y- Since one 

as 2o. Similarly, since the length of ar V row was fixed , 

26, the maximum capacity or anv len 2 th °r the literal key was 

no row happened to extend the Li^f 1 was rows. Even though 
less a 26-number key was fs r «t a , 1irid ' tb °i the diagram, neverthe- 
controlled the direction of the tran^ 3nd - td6 nujnbers frora the k ®J r 

first letter oTthe^ly lt Can be seen tnat » if the 

key would be 1, the fir«!t an , tbe first number of the columnar 
the second letter of the nlai W ? U + contain °nly one letter, and 
the second row, i ° , n Si *? xt / ould faU the b.^imlna of 

the first 2 t J \ 0t th9 C0Wr that 

letters of the ciphertext T 30 ** the firs,; 2 

in reading t ho was of considerable help 

eitton oT the Till?' % ° f thiS traffi<: the correct 

eoation oi the Bible— since, as in the case of the FO series 

first ? a f 0 f; PVer r t u mP + ' he W0rd AND was first on a pa-e, the 
firs. 2 letters of the cipher text, would provide a start on 

na^ra.-Ming the plain text. j ust previous to the closing up 

°fc n tt'Ti rr Brltlsh P rovid « d “ with the correct, edition 
. . rToi 1 t d f fiC . " dS read * The corr ect edition proved to be 
e luejacKet edition oi the Kin.* James Version of tne Bible 
issued to all British servicemen. * 

2. 3-i il£:BUKG-«A0 PAULO 

_ -n it hist, 19k 1, the control station of this circuit, viioh was 
io o::. .y ci c of ..io circuit heard, w s 'nterceptei usin' the const at 






Ca l 7 imy* rrr , 

W&rl^ss Kri, »;*£: srss ss- 

»lcht b,P r \, 7, ‘' J theory then ..‘^l,:“’ ,, , n f, v»U, nor '114 othor 
f ive melaio 6 COmb type. After ^ nt tb « V»tm, utill **d 

for each dfv ?® re read in a comb * ^i^bl* number of trial*, 
the keys t' * aadin £ to the asmimSii Iv® (Urfrtr ^t key being ueed 
in this case" i? 17 ' lr " 43 ' ^^er' ap^hnnai™ a baok waB employe 4 for 
started tho i it w as discovered that- -»■> ° f the a M rjn t involved 

the key. * Then^if” 4 phraae IWCOWSTITPct?” 1 ^? T ci rcUlt was nrij^innlly 
ed to us e th ® ft9r con tact was SSSfPu wan used for 

was alwavs *+vf b °° k " PA ^ IN OU’SCK^l^ tha a ''™t was instruct- 
the the first 26 letter' 5 If” ‘* trsct l"e the key, which 

ular HibS/S?hod- he th b7 a °‘"<r.ha^ajj;!-^ t he . W y Th. W . of 

woJlH o P* 46th <*V «Tth.^eS"S?» lf the 't-to -ere Febn.ery 15, 
46 P lu = 20, or If’ -“O 8 of the book to be bred 

numbf»r* hj ' 3 meth °d could no lonn^r i a " nrit was further instructed 

bel % 8W«ter than the nunSS of G U * ed ’ due to th « size of the 
hTh^T 1 * be ^tituted. Cn t?e f P !5 eS in the b ™ k > a new 
None oft^V ^ ° f " mE apprehended, 

None of these books were available t 0 thS investigators. 

3. 4— E. HAJiSURQ-LlSBON 

columnar tr^osUi^-^ 1 ^ thcm S ht to be simple 

buried preamble. After the c n i / npl °y ed the customary four grout) 
this traffic was also L e *4£f tT* ° f ** M h*efer“ P 

Only 6 keys were re cove re 3 for this traf- 6 C °^ transposition, 
cipher tart proved to be either n d, ^ iC * ^ 4 ^th group of the 
date of encipherment. The book was eT+' ^ r °^ P 0r 311 ind icator for th* 

the page was apparent!/ * P °^~ -d 

Plus the day of the month plus the a//T* v 1 t3jnes the m ™th 
was apoarently composed of the initial let . nunbe J> ^ literal key 
but in some fashion, each time lW ’ 

started at a point farther down the page. *’ the Key " as 


D3. 


SINGLL TRANSPOSITION* 




■Lcit> 

the ren 131 circuit •from^ChaDult trle monitors * no »er« covering the 
emanaH U6St ° f th ® P.3?I fS! epe °! Mex1co to Kauen, Germany at 
This na^f-*' r0m Mexico City to ® rc ® pted some five-letter traffic 
Mexico r + CUlar tj *affic was sent^ 11 ' " rhich appeared suspicious. 
c| r r' t ° Uy to the address Qra rnn f f° m +>he Gable address VOLCO in 

characteristics of a cipher ? B in Berlin > arc it displayed 

Sr a T i f hered code types JL a (f e ™ instead of the customary code 

obvi^ ria ^ i0n reveal ed the messa'e f ° Und in commercial circuits. 

tZ T y trans P°^tion! and tS% ° be in a which was 

the language employed was vi fr equency count indicated that 

nulls. After some stud^the + T'/ Sing low fr «^ency letters as 
spotted as an indicator 5^ b ^ rd « rou P of each message was 
we re within the first ten lettf 1 r^ree letters of this group 
?r y our different letters used 3 ° adp habet, and there were 

the rourth ^ -■ — 

i-e., ABGZD 
ADBVD 
CJCRF 

Another curious fart ai u 

exclusive of the indicato- r rni , eCdme ev l aen t. When the message, 
tiple of 135, there wafaWsTn"** n0t 133 letters or a 
This number, it was found came f dmDer lnser tea m the message, 
"as a multiple of 135 ? nuiIlber of letters which 

foiling it in the «3 S a ie . for Samtle° if nUmber 0l ' letters 
groups (or 555 letter*) t h « - f® ple » Ln a message of 111 
108th grouo. This suep-esterl r 3 wou ld appear after the 

of 135 letters. The fact that°^lv°f of . e ™ipherment by blocks 
fifth position of the indicate. ^ fo “ r . leWers w “ r “ ised in the 
Aetino on this theory a ! " “S*! “* 3 four-cornered diej™. 

lined up in %} ^TlT^rTXelT^ ^ »» 


1 

V 6 

271 U05 


omitting the indicator in the third group, and leavi 
of letters. 


hg a remainder 




1 1 
„ , 5 0 5 

U " I z T XI «l a U J X F A a S D 

1 * U R * H T X v £ A z H fi E B 


2 2 3 

0 5 0 

UX3XTIEXSUSU 


0 0 


u -£ UHZFGECEEZENLUXfl 


OINZDNNNTNEV 

fkctxbrednin 


3 

5 


0 ^ 
iU ' C LN2hXOAE£Uj 


5 5 5 

beuelufevilcnai 


'“'•tnsHi.nuni 

HF 0 L 4 BEN(IXaR«HrxsL 


I I T a ,1 LPANZU N 
HL'.VFEEOETAIL 


6 7 7 

5 0 5 

NXLBTNLNYEDLZSWTXS 


8 8 9 

0 5 0 

fyloznlnnnxx 


szmdimkxyonejhkunv 

LHTAENOUJRRXJENEXX 


'IJIK ZOIRENSH 
UOOS.INICERUV 


1 1 

• ? g o 

5 0 5 

UHLELUUSUYEXfilAFXlA 


111 
112 
0 5 0 

CLSRXDNHNXRZ 


I I u ndfxlcyeferftix 

EDIBAXVUEZAHHZZMVL 


teiernlderrr 

AUVXAIUGAZIG 


1 1 1 

2 3 3 

5 0 5 

ymrxuhnxilijinz 


2 n n n fi i l o z z e e 


IfllSTNAOKBlfSZSDT 


I 


61 


Sin.:e nothing at all was known fibmt the poeelble eunjeot 
master of the messa^o to provide m ontorin,; wodce, It was thouf'.h 
^>eat at first to try unagramminc for German numb ra. Of the t« ,n 
jormn numbers ZWO was chosen as ttie host to work wttn, be anno 

nvolynd two of the moat infrequent letters, t ius noosa.’t itatl rv . 
le.rcr trials. In such a case it was neoousary to try all eomhina- 
ons o* the letters Z, W, and 0 in each block to soo if 'ood tri— 
jraphs would result. Taking columns 37, 3, und IjO, 


37 3 UO 
ZWO 
X U H 
E U X 


the tricraph EUX was discarded as being unlikely . However, the 
coio_nition of columns 37, 75, and UO gave good trigraphs: 


37 75 UO 
Z iY 0 
X K H 
E N X 


The tri ..graph X K H was not discarded because the German abbrevia- 
on -Jo. C-or hiloherz (kilocycle)) had boen previously encountered, 
lnen by adding column 58, 


37 75 1*0 56 
Z W 0 N 
X K H Z 
E N X A 


the Gerniin numbers NULL or HEUM were suggested. NULL proved to 
be correct, as shown hereafter. In the process of ana^rammlng 
certain columns were not used because >f the obvious use of low 
frequency letters leading to the assumption that they constituted 
nulls : 


b 12 1*5 69 73 etc. 

Z J J Y Z 

Y Z J Y J 

Z 2 Y J J 




i 


or thermo ^ 13 ** v ' ex ‘ wa3 anagramied until a substantial portion 
recovered ™5?, WaS r,iCOv ered. The transposition indicated by the 
tio/i system h 8 ns cou ' lc * not be fitted into any known trunsposi- 
fore the anacrammf ^ int of sorae progression was apparent. Tnere- 
by the suspected P 1 * 00 ® 33 pursued, plus the help afforded 

appeared to be the °df'®ssion, until there was reached what 
a definite r e uilarit be einnintf of the message. At this point 

numbers* f * ^ was 3bown in the progression of the colunn 


d?onS 672 ^^ 1 

I ^ — 9 10 1 i 3 ^ 1 

~ H X E I~n — 


¥ X E 
N S 


s X 

K S V 


i 

725267 10 

7 2 9 h 2 9 9 5 


MAXidAXXKUF 

nv LlX k ERNEUN 2a,oF 


H Z X ltd I T K. U 


L 


7 

6 2 
T A 8 X 


? 0 3 7 u 5 ? 6 11 

L? 7 5 « 3 

Z w 0 N u L L 


1 1 

802 8200 

1—1 16032217 


“fMl'XKHZx 
1 C H £ N x A N 


X Z <V 0 X E 
MITRUFZE 

tomgusta 


I 

I 

V 


0p<M1 eX, ” inatlon ths Allowing relationships vri 


will be noted: 


38 

39 


123 
122 

124 


60 

78 

103 

61 

77 

101: 

62 

79 

105 

59 



20 

19 


i£ s.:i;, i 7rs™ -STAsrsr-r,;.': 

fcfien tentetively insertpd nn-ia«t _ -1 1n i which w. 

tne diagram; Under oolumn 10) ' “ the second Une 


3d 123 3? 1 OU 61 73 20 103 IdU 

105 


First line 
Second line 


onti ruling. 


38 123 39 1 60 61 78 20 103 lull 
122 59 62 77 19 103 


First line 
Second line 



Some columns could be fitted* but no completely satisf^c^^^ 
arrangement resulted. It was then found necessary to lea re m 
blank spaces for fitting. Only by the following placement co 
the actual progression of the columns be maintained! 


36 xx 123 39 1 60 xxx 61 76 20 xx 103 lbh 
xx 77 122 xx xx 59 121* 62 79 xx 19 xxx 105 


3y continuing th«=> placement of the other columns of the mess a -> e i 
it was noted that some of the columns progressed upward* otners 
downward* 


123 

12 ? 

121 


101 * 

105 

xxx 

106 


etc. 


The continual process of adding to these columns, and at the same 
time anagramming for plain text* brought about completion of the 
message* as shown on the following page. A tentative diagram was 
then developed* 

Ji 8 .12 5 1 6 13 7 9 3 2 10 11 

3b xx 123 39 1 60 xxx 61 7b 20 xx 103 131* 

xx 77 122 xx xx 59 121* 62 79 xx 19 xxx 105 

xx 76 121 xx 2 xx xxx xx 80 21 xx 102 xxx 

37 7 5 xxx 1*0 xx 58 125 63 81 xx xx xxx 106 

xx xx 120 xx 3 xx xxx xx 82 22 xx 101 107 

36 7 h xxx 1*1 xx 57 126 xx xx 23 18 100 xxx etc. 


This diagram could not be made accurate from a single message, 
because it was impossible to place correctly most of the nulls. 
It was uncertain into which column certain numbers at the begin- 
nings or endings of columns should be placed, and in addition, 
whole columns could be interchanged. 


Jfnen a second message was anagrarnmect with the aid of the 
tentative diagram, most of the ambiguity was straightened out, 
because the use of a different key determined the beginnings and 
e/.-dirgs of all the columns more accurately. Later another 'mes- 
sage was anagrammed in which the diagram proved to be a mirror 
image of the one previously U3ed. This determined conclusively 
that some type of overlay with two faces was being employed; t.hi 
also enabled the null cells to be accurately placed, since the 
null apertures on one face were not necessarily designated for 
nulls on the other face. (See Figure 5). 
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Columns 5 , 12 , k>, 70 , 75 , do, lJj, 121 , anrt 132 are nails. 
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S r&jsrjrz: wlu 

thl. grille ...» placed on » pl«e of a 

arKl th * “•” a o'» .1". written out from left to rirht uTthf ‘” <P ? 
«.m*r through the out-out cell, (except that »o^ 0 ? these™- 
?U' c ® 1 ^’ w * re specially marked lor the insertion of nulls in th 

,en Clphftr toxt ^ken out in col^.ns accord" 
ia to a key written across the top of the dia -ram, but the 

.o Hums were taken out in alternate fashion, proceeding down th* 
od/ columns and up the even ones. Ary one of the eitfit corners 
oi the grille (obverse or reverse) could be placed in the upp* r 
left-nand corner. 
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ntver was aer ^ v ©ci from a book fin th* 

discovered), taking .in, t, ' ln tnis case the book was 

" hi f‘ «**• of the overlay 13 ° r 19 lettera according to 

designated by the first th^ “ p f ermost * Th® Page of uie book was 

indicator, tn, in- 

ABCDEF 3 HIJ 
1 2 3 ii 5 6 7 8 9 0 

A d i f £q x* 

Of the page to be^aed^wa^ 8 ^ a lth every message, ana the selection 
The fourth letter was a " ot contr °Hed by the date. 

ner of the overlay to be used* ^ U g ifth letter indicated the cor- 

A B G z D 
12 7 

would indicate paee 137 „ 

corner, a key length of' ’ll^uld 0 ^^ because of the use of D 

J, and H signified the possible l^lenSh the letters 3 » 3 > 

A, C, E , and G the 19 -length kpv, ®f 2th keys » and the letters 
traffic (See last paraph) Was only in the later 

Aeys, using the wicte face' of the^ grille. ' &PPeared the 1 9 -length 

single transpo si ti on^ve ry f f e^t ^ though technically only a 
of solution by matching the ^Prevented the usual method 

used, solution of a single blonk i If reco ^za.ble nulls were 
effected by fitting £«£ nSE toV “I ^ *”*»** have been 
diagram. Since there were ™ 1 ^ k "° Wn nul1 c " lls « the 

on this circuit, the solution of re ° ^ 5ed beginnings and endings 
270 letters presented fjmLu ft" ^ messa ^ es of less 
that - — faot 

rrom 

rel v via station m TSST (Ne. lock) to " , ,LSNN 

asTtnaw srsayrri- S8 '*?w5 

cin:jU. Tns saw system ss- Sis later dl« OT *red ! 

u 7 r w * nt f™ e P ted fron » couriers out of Mexico. These were 
labelled by vhe Germans as "The Max Code." 
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or transposition anri r' 1 5 cuit ^-D stopped using the simple type 
traffic accumulated i* dr eU em Pi°y in g a new type system. As the 
cipher text was found t n T examined and the third group of the 
type of indicator a <3 f no * e ^ nc ttcator, being patently the same 
The first three letter «* ^„ e ^ 0llntere <i in the BHAJOB-BERLIN system, 
the book to be used- the r th ®, thlrd group indicated the page of 
gave the corner of the grill**^ *** 3 dummy5 and th * fifth letter 
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1 2 3 h 5 6 7 
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HBPlfE 
8 2 


or 


Z I S z A 
9 5" 
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because S i t^include^th^indica tor /^ir £“£ Tv T 51 

not conpletely filled, a letter cdec* *“ 

1/51 2/50 3/50 u/103 

Tne last group of the cipher text was usually incomplete. 

because the messages were sent in blocks of 50 groups an 
overlay with a capacity of 250 letters was first suggested! This 
seem- d somewhat large; naif of this figure, or 125 letters was 

^ t ? 6 ^ lch v had used by the KiAJOH-VOLCO Cir- 

CJlt# . 7T,e fact that the obvious nul] s in messages in the same 
xey coincided fairly well when these messages were lined up m 
blocks of 125 letters gave confirmation to this theory. 
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<vit,h a aeptn of eleve. a ■ I 

<eth er slvi ° d 2 *°> columns 37 , 11 7> ar^a 67 I Q ’ Tr ^ n * 1 or 
s °' "ere orou^nt to- 



s s rtfi^ a _ 

£"»«£ »"* jested VIKR 

g Wae rec °vered, ( See Fi ^J° swiftly and the complete 

which gave T'tenTa^^’ the colu -nns were fitt a • 
not ho i tentative overlav nr fitted into a diagram 

Qld(B or PlaC6 f exactl y until other L°° U1 * Se the m11 cells could 
wit tn P ° S 1 ltion of the overJav used 6 T S in whif * a different 
tlcular 6 V ° lujllnous amount of traffic^- d ^ solved * However, 

. . circuit, solution of tuo ansmitted by tnis par— 

ri Sures 8 a and 83). The Was SOOn accomplished. 

otters, 125 apertures on each 'f " "?? * of 13 by 19 

US 7. as starting points, with ’i ei ^ nt corner s being 

vertical transposition, ’transcriLd 0 ^ 8 " ritten ir ‘ alternate 

K<V . book. (.fter tne station was * nUflierical from a 
up in March , 194?, it was discovert ^ d ° wn in the rouna- 
coJ lection of selected storiJs iVom th ^ the book used -was a 
ev.r, the boo, „a s never .vaU^t^^y^". <~ 

tr.ere Ts Z^UTJlZT° ’ U ®“ *<"“* 
met:ja e, i.p wr v 7ltf ~ Y ^ iv ' r at the beginning of each 

the serial n^'te'riL be.i’ at the I""- fUrth * r . di scovered that. 

a very effective crib w^s brought *» cn Thus 

* !s -’t'e* have a stereotyped be-inninr tart'th 1 ly aid t "‘ 5 

c >r.s if tea of either tne signature HUMBiSTO or Alfaro < “^ Uy 

01 '“ se eta. Wed this office to solve pracU^liv ‘v T 

tne messages Oh this circuit, whether in ueptn or not.' ' 1 ‘ ° C 
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A curious fact developed in the use of this grille Kv t.nis 
circuit: namely, the overlay differed in one cell” as used bv t 
coM-rol station and outstation. The cell u-i.rnaUd by tne si 

* as al " a * /s employed by the control station as a null /but 
never by the agents in South America. 


■>ol 


KLUJ.-iE bB 


E 



Some 


of 


tne me trio is by which messages not in aeptn were 


solvt ire worthy nr description. The most conmcm method 

by use ot tne signatures, fne best case «., 3 uiat in *v -i 

alter one or more blocks of 12s letters t ner^ * e , „ 

... J uuere a js a remainder 

oj not over 50 letters in length. 



I or *»x > iiile • 
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rt«.-aaindcrt 


h.A IV . 


S.-IRr. Ba. BXO 03/lT* EBUAT XBERA DLXHU iKXI’K fXXRO 


Inspect- inr r nr . 

th °~~ * '' eit *i/.r£r M»u»™; natUr - 3 ' ^ i3 'lulokly not ed 

ockin, ^^ T ° arkl thit th* letter* for 

l ,l t> Oi f iiQ t * 1 »w * a.*. 


that, there i, n i ei 

*7 prese nU te i^;^, H ^®^TO and that ali t^ i^ter* f< 
X~Al r+sZn\ 0a the diM iram .istl^th U ~ letters (tne length of the 
AUvUOO is written out at th^ ’ he J corner (from the indicator) 

^ ‘* ne ending: 
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In the cipher text it is noted that th 

° ‘Otters lor ALFREDO: " Pre HrQ following number 

* - 3- f - 2, S - 3, 0 - 2, t - i, H _ u> u . x 

tio:I XVcoCs? ° nly be <“™» indi eating direo- 

? t -^x)x- 5ZTA2 TXX^h 


, 3° 

^n^onlTv !™t mti ° n ° f the el ^ er *•»*■ "*«1. the placement 


A'SiviADL 


, ’ ■>> one column ending witn D and the other starting , U h L to r 

tn ' f:’,? A ' Ffii30 - T,w **»•« preceding p and the on". ^.'oUotin 
ore fillec in; tnen the final 0 of the cipher text i s tnserw 

? l ’*~ ***•»**» or. tne cipher text, impossible plain text Xoi 
ir- noted sued as H-A-A*AX. 


^ is tnerei'ore a ,c»r.ihi 


v> 



y ' / 










^>is too i s d , 

P° or coluun after tr An - thi3 . 

letters X to TolJ °* Th<3 noxt ste 0 C1 ‘" ner te - xt ai-d fLr.oin: 
t/m^ x's have hi ^ F «£D 0 . p ron * * tCe 'Vtea i s allowin' two 

6 been *"°"n to be useS V ^° US "^lons « many as 

* Placi ng the cipner text 
it . , -^DLX^J 

colu:nr 'ending* 1 X is Placed i n 

lng ^ L. Reading aW n + UU p ° s ^ioo in the 

° ln th s cipher text 

_ . -°‘ AL> LXnll£FXi;FTXXP.O 

a column lej-^+u .. . 

»•»*«•»• »oul<l m for th» Utters > one «niin-- tn P 1 - 

aft er El' is ,n ? the next two letter® r s Served, 

In.- ini wi ‘ XUFT is fitted 'or ^ ° llov,i, 'i UWU. Then 

is .,; ace ,: , ls i lves t»o tjood bi-rajns T~ 01 , the columns e rc - 

OS-/4 of 7h y 0Ur le “8*-s r«?^ ' Tn ard »’S. After XUFT 

OdJ.'Tn f tfle , asfu ' 11 Ption of the endin 1 .rf up a col «r:- 3e- 

'° Ur «?» « 
" ro discrepancies are found. Wrtlr '.; XXP.O tc 





-=ud ijch; 


XuhT XXP.O 


^ 1USe a *** len " tn of thirteen is already 


y k r own to be used. 


t •» _< LX H'J 
9 10 


^ XbrT XX RO 

U 12 13 


rtith one or the letters 
remaining one. The foil 


0 eliminated, trials are Tarte *n.tn 
1 Ltitxi combinations result? 


tne 



MT-WS T a» r “ dla “ r “ ••™ , -'SST suggests the prone r name 
sint the ?“ * ^uence X3A..UR.. lend, confirmation to this 
, h f rf repeating prope- names is well known. : 

PerlnH ; he . r ™ lmr « letters of the cipher text, the complete 
k&j sricl remainder are recovered j 
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° lo *» r r*»( lu#n *’ " ol " L '"i. morr. <mt ,Tkl 7f k Ph * b1 »". nature 

•«oe. 4 .tlon B to i*tt«rn tnvolvld / ’* n ^ K «SD° beoeuee 

t *"‘ i *Hh « numb 0rlh "» oniVTn Mo * #v «r, th«r* «rr, 

would bn k * >r 41 ^I^natum n i » ' * wb He the inruna^'e would 

Pro. u m ir oa* B K 7- br ««kln. : t ^ n th *» AU-KIfflO or HUUH^ 

**** With ^ dtlTLcult 

rh«re w/ig unothe 

Kor example^ pUoln « roooja^labln nulL^' th ° bor,ia ° s 

Aik ’ * n the dta.'r.irr . 


Indi (iMiorj AJiza 
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^NTO XlSrob 


miO NX IKE UENEK KFX 
Ina ^ ctinij for obvious nulls tb. r „ 

®’ the ^Howin, arc noted: 

LOENu dZNTG XISfix k , v ,,., 

* - Xrsao NXo.d NX IKE UENEK EKX 

section of *t he *c i phe r text.'^^rk^ 3d ,^ U ^ s <* the fi rv 

«r in — •• - r;^:; 





possible null^hould^be' 1 ' ' a ^ ain ’ it is obseri 

-o o 0lunn5 ^r^zritr 2 --tn, 

1 A '->• Ibe colur 


that the rex 
ward . The re 
is tri ed thus 


t 

are 



r-xt : ossibl^ nul . 1 


is four letters away, 

«/ r 


ZXi SKL OE I^ZiVT. 

1 2 


ust necessarily read down a column; 
t.nis would r'i tj 


tnere is onlv or^ i 


A ace 




Continuing this 


process 


+ '° the next likely null. 
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ther-o is only Qne null 
-fitted into only one ol 


remaining 
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ana 
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next column can oe 
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noted, and 
S . £ 3 . 


■ W X- & a. 


inspect 


* > ll i TiH , or 


str 3ujt:<*et. the 


>'ro:r, the 

inserted 


.2* SKL 

1 7 

*d/)acerit cipher 

in the diagram. 
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text tne 


J^i.r >Xit>&>t XS 
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I rMiowin/ -X Is chosen 


• . l 



ZoT.pl ^ tin>' 


the word SliiBSN 


the message and Key are 


recovered: 







V„„., ^thod of placing nuU, ' " " ' “ ' ■ U H 

fl ”"i U ;SX. u1 ' hoth wlth «" •*• 

T* J 


t i ^ ^ i 8 int>®r«3^; »\ T , ■• 

the mptur« H ^ tSh Goilni «htt belteveu°thi tfle °f security which 

dispatch®., X tne 9 ra 3 ilsan <?~>v ^ lL and jerm *ny and during 

'nerci.Hl circT, 36 " 1 , 0 ^ thi? cIJcS^inth’T 11 K ° reisn 0ffice 

u --d could no longer b ^ ln this system, <*hen com- 
'• U ~ D tlAJJRID— WEST AFRICA 


Tn October, ldbi *u„ 
content call p^. l *''-=.pt,<i » station uain* « 

-o preamble which was unique J 

6 / 136 /im 

This was determined to bei 


136 " ?nt^i ° f 9nci P^erment 

" L . ° “* -ot^l number of 

1^1 - total number of iot-t' rS wlthout indicator 
number of letters with indicator 

be in the third gjo™ "(th^saro 11 1 ? dicator » and this was found to 
3 -Dj). Like the circuit r v " ^ aS Bi ^OB-VCLCO and Circuit 
derived from the normal alphabe^/gT 01 *! indicator was 

three or two letters represented *Zt eqUaU ^ ng 1 '°* T “ 3 first 
'taken, the fourth ? resented tne page from which the key was 

evJently a oorLh^n ^n ^ * *“*• «* 

ma V wero sent of this length, an overlay with 136 *1* Uhe 
total number ol letters minus the indicator) was suggested. 

J. ai ‘ LC ,° n thls clrcuit wa ~ only intercepted from the control $t; 
tjon <nd was rather scattered, but three messages aopeared whictt 
ha< f b 9 same key and employed the same corner letter. Tnese 
messages were lined up in the customary manner vSee Figure 9), 


messages were lined up in the customary manner (bee Figure 9J, 
From tne frequency count the messages snowed characteristics o] 
Dei ng in the Spanish Language; anagrammirv for this language «■ 
tne' tried. Trying lor ♦ he Spanish word PfcRA, columns Uu, o6, 
laced together. 


— - — ^ 

and ?h were placed togeth 
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,5 6 Y b 9 O 1 2 3 it 5 6 7 

XOTDDOitXDXR 


0 A S £ X I 

X P. A X 


v li X R 51 

0 X ? X X M A A ° s 

AftXYXXVSXXX 


9 9 : 99999911111 
i ? -U 5 6 7 3 ? o o 0 o o 

2Jl 2 3 1) 

u X X X 


0 G R 
X E E X 

1 R 


N E 


E M R A F 

ydoeaxxela 
ethasoxuresa 


1111111111111111 
0000011111111112 
567690123 >45 6 7 6 9 0 
X X T A 1 5 F S N 0 0 I X II T 
TXIASXKOAXXTYOXD 
TXINUASSR.TFR.NEXB 


1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 ! 
2222222223333333 
1 2 3 4 5 6 7 690123U56 

1 R 3 I ? 5 "5 W o iTf 1? X L P ’rf y 

2 HSVLUSHH OXKAOOT- 

3 XDXJSUERRAXXAAXZC 



adaintf ^ x before and after PAHA, 


cKET 


105 44 

x p 

7 H 
T R 


66 45 
A R 
A T 

A T 


24 1 j 6 

A X 
£ X 
K X 



£See Figure lo). The^overlay* co-ilrf 3 ^ 268 Were cora Pletely recovered. 

another message , as slLh ■ n0t be co *?letely determined 
lay, since this circuit used n ? the ° ther std ^ of the over- 

£? f S ^° r e Side ^ beine Sed y n ^ ° f the P°«-i‘ole eight corner: 
of* tH >fJ ° f re co *is truction of the tne P revi -ously explained 

-ne same dimensions as the the over lay proved to be 

7 - 1 ? letters, bu? JJ 6 *®* f^OIXSO and Circuit 3 -D grilles 

(See figure 11 ). *** a capacity of 136 cells. 
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2 
3 


1 

2 

3 



M-i'HS 10 


1 

2 

3 


1 

2 

3 


1 i l 

^2262228 
j- 3 L_ 2 ._ 5 _ 5 j 8 U 1 

ini*?,?. dY ~X 
s 2 r u A R x s 
^ ^ A it X s 

7 ° ? ? 6 U 8 

244 -^ 8 2 
f i yirr-oir 

!; s * x e n x 
lj u E R R A x 

1 1 

9 2 1 5 2 i a A - 1 

9 0 8 o ^ 6 1 g 8 f 7 5 8 9611 

0 9 7 

Xn IXTAK0 ^Dli 

3AR cosx u J 7 5 0 a «u 

a 5 I i 7 9 , ? ! ! 3 7 1 3 1 9 5 

oTc ^f?44fi^44 

£X ^ AA£ « I A L XsSxTRf 


1 1 1 

0 8 0 2 
7 5 3 U 
A T 
L 


: i< 

T X J. 

I X S E 


1 

6 2 1 

ii _2 1 9 

BARG 
3 A R C 
D E X U 



1 

2 



l ii 

620862222 
7 6 a 6 u 3 1 9 

E x”a"v SR I 0 17 

E1ANXAVIO- 

XENVIAXIJA 

11 18 

2 1 8 0 3 7 3 

808090115 
- s X £ H x K a E 
oxaxtakor 
saxusaxen 


953157393 
0 976280 7 6 
^iNUluoAi 
S T A x 0 E X O b 
X * x s I x E S 1 


3 7 1 5 7 1 1 
U 5 3 5 6 Q 5 
'l u E x P p. 0 p 0 
^XuJON T A NX 

HTAjCPOKXF 


Wi 66 U 5 2 U 

para 

Pate 

H a T E 



KI01IHS 11 



^«rSW r or GOWIwtcicr^^e 6 ' 11 ™ 1 ^ 
roun.i'SThfcipheTtexI an^ %?? '* ^ ** 

the circuits ^ployin^' l a l^ k *J, dete ™in*i- Like most of 
“**<» * as a^e'SX^^ :a 8 !h°«orH ^ this <*«»“ 

that if an/ nessaje contained «,« than'lJS letters/u'lar" 06 " 
‘ ‘ Ln '° parts and each P art enciphered with a different ke- 

' J • 



-dt r. 


. r - * 


B t , 


-wositio:.- 'iustitot 




1 .-x 


’.TON: 


r n February ioi , 

lotters^d'been 3 ! JJ£ the ^ed^al^nlif 3 1 directed to traffic 

S'ss’s of 73 


intercepted o n Tja^ C . - 

t,ro ‘'ore 2i2 let-pr^ early P a rt of Februa^* anG lirse •'.ore were 
inci'.vv}u;il .From °"~°n the same kev t " r ^ r * OF these latter three, 

tabloa aSrS'TS?™ 55 letters. The 

Positions for nach m-s"* alphab <-‘t component^ \ ®° n °alpha .etlc sub- 

iron the individual Ssa e * '^here this * k <li ' ned in different 
Poaod -lain \?! Sss e > the result ^titution was re- oved 

^“letter ^ Pts to ^ to ~ ^rans- 

° eS >rere rewarded. s -nul taneoucly the two 



to fore the . lain text U^a^f^iov^f ^ Cipht;r text were witl 


46-6-1 -l ^-23-2 9-1 < oo i 
it -’T- tily became apoaront tt-- * +n 

-n ou :h fashion as to indicate "the transmit- ““i'? ** mlUfin 
.inmir c-i key employed. It ‘hns' w ? P ? lUon aia ’ r ® and f 
•t.-d been eiXecte? by th ! tr ^°- • 

; ‘fp ; pf “«* way as by the 3-? Circuit*' (-°2 : ®l ;ru< * ed ln 

-• o -cui t, however , the columnar Vcv prove^'o’te* '"t*® 

,o rxio^n • ii^am shovis t,,is nuneri^ ££ JSg* 

- i.*-- oiie enved nun&r-psi - ' -ijx v . - l 

ici -_co.i tdi a litei'al Vg-y 

* vS ** ° • 





U 21 

ts 5 

J 2 
I 9 
:.r 13 


79 5 
ll 6 Q 
US o 
UU 10 
U3 .. 
U 2 ±2 


IM — — ______ 

T - TO OQ 3 6 15 13 16 , JO 21 lli 

2 20 !? 29 lp 33 Ul 37 16 Uv ;o 32 

3 21 26 30 11* 3 i* U o 

^ 22 2? 31 13 35 39 >6 1/ 1*8 U9 


3 1 ' 3 U 11 1 ° 

6 33 13 7 2h 23 


-es 


" f ° ^^^'adr^cTdn^st °i s ? e Gonb V the longer nes,a 
determined the absolute value 0 f -t- a ' G VJtlS letters which 
.\ y# combining the fact of the letters of the literal 

the seven established letters of ; columnar transcription* 

* GyS ' the complete literal key tha 21-length nunerica. 

round by consulting the word S m to be Proverb, 

•^ c,u in the dictionary: 


UEn hue?, tpjjit u: - d 


/^roxio oi* 4-X-. _ . , 

t::e ou otitution process T>i^ I** was 331 indicator for 

iroro juxtaposed so that the second* 1 -^* al Pha': et components 
-ho ctphor c .ui valent of the nla-in ~f+ 3r 01 tne indicator -..*as 
of the indicator— thus oro^Jnr t} ? e first nosition 

producing tne substitution alphabet. 

The answer station to this co p, rt1 
repl;r .nit was instructed to “ ro1 never ^sed radio for 

countries. Juljinb^ 7,™ 11 *r.«* h central 

station re .uested. the a -ant p-or?.;tion which the contr 

* - * -ent has located in South America. 


E2 • ^LYALPHA ’STIC SUPSTITPTIO' 

~ VIT 10 II 


it i S 


.a?:: 


T'VT AT 

- • • < _ /mi i 


4-1 


h.t: i; Tr-BOdrA.'.u:; 


' v, _ 

- - U.JL 11 C 


p‘ tJ ? is circ ; uit ' vas intercepted around the 

“ ' x ' aZ and provcu t0 e > - n the main, simple columnar 


. r , o— iucuin is 

'Ir.TQver, there were some messages durin;; this period which were 
n a on' stituti on oyster. Toward the __tter ,lrt of i?i .2 the 
osltion traffic stopped entirely and it vras at first 
ciiey:_ that the succeeding traffic w-.s a continuation of the 


miii .itj t. itlun ay atom nrsvlotJoly u*«»d. *horily thereafter, t» M 
Ini' >!•• uti on Um no-«ttl )*»<! "J*no/«rt;l M ri«'l tru/ir. ,r. t/. ,„ 

■ n i ui'«U tuLlon) (syotn i »m w <i available to V.! i offloei <w,0, 

oUwr 1» n /* tons , It hr. 

n *,! ,,rly subetAtwtlon tr« rrio hod actual/ 

tution ouMj-lmM .«H ,rlU i! i /' r<, '“' 1 ' 00 ' ' lon Ul « "<J'rt'7w*fci" au^tlr* 

tJia Uvirrlo mi r, ‘j" r * 0 t 'truth) ml Urn complete %o utiw of 

.ntlrely. P t,M »’° ,nfc "»*re ttw tr.na;,o«7ti*n truffle ce *<** 

el utrao tor la ti oil °of * a/iy l^ovi' *' hl • t ' 1w '» **hlbit«'l no «,/. tynrrvO. 

WHO evident from th« he M nni e' 1 " r 0 '>J.vui r-.yeten. ' /no fact, 
that -loot Of the n^rtnX u * ■>»* 

- not -ontlnuoun repeat* i, u i , '"’ r j " 5 5 lA,r 

lrujly, a b; look of meaoages **, , JL l2T lr jl b ***w*Angs * Accord- 

and it m , fouITth^ * fop th * tr * nt ^ r * 

ooinoldonoe Uirouchout, which -y,,n a a,lr> ‘ Tr i''’»ition p>v« a 'U>i;r*>*5 of 
Pronlno that enclphormJat i ! «»•*•*'*' with the 

al.ra.va by nonno of tho aiuno oStitutK? 

Doc» 24 132 letters if 3 v j S l ® J £ ' 1 '* - D .71 / 

D»0. 24 159 letters . , , « -J C - J . I 

11 u i 8 I J 3 A J X h i ' F K j K 3 C 

z h n t h h s :; h 3 tj y j k « v ,« . Y ^ 

Pfl7VV7f»« _ ^ y » * w ^ > l l( h . »• 

1 ^ K I z p j H 3 D R c ' / u V •' V V v 

2 2HJSI *5 " *X :i s v \"l 

~ V T « l ’ * V •; M UK u r«Knn 

‘ I •' & ?. I j „ T L ’.I 1 1 ll J Y 1 *P M »' 

^ 3 0 J N Li D U 1 V ; . v -• .. ^ V. ?. 7. “ 


l ; e I! : ; S : “ 3 K K Y T s h o z h ? o u l ’ 

•' ° f ^ 2 L ^ i !. /. :i T: ■/, y ~ y -J IT n -* * f 

'< 0 r U U L M 0 .. 3 T L y 3 ? y 


n 


v •? 


:: 0 l: ;; fol? ) ,; 
k 1 v 3 j j 1 v 0 

B3PU 0 3 5 0 i. j ] 


v :i :i K 7 s 



!! :: U T Y Z !. H 

(j D K .1 ? 0 D U 


1/ T 


S X 


it 


'i 


'i r- .» 7. G Y. V. 2 


H Y H -> Y L U H Z Y V 


If /» n ^ 

'w J ^ 1 i 

• f C Y T V v r 

< I • * a a - * •/ 


. Y 



own 




•/[gO roVO'liJii tflflb *'»•' ’■ ‘i 



arf tto r eTTO-|X)8iUon letter, in succc -Mm on ^ 

Ion - repeats developed at the beginning ° J thn in 

«™ foon.1 throughout the 

identical positions and in different position. At flrct, ix, 
appeared tiiat the recurrence of any repeat v/ac independ 
its ocit^on in the message; but, on closer Jtucjy, it bocano 
evident that each recurrence depended on whether trio pom n on 
vras odd or even (with roforcnoc to tho "rall-iGncod" version of 
the messages). Tiiat is to sty, the intervals between the positions 
of any occurrences of a repeat vie re always a nultipie of /• 


At this point, it seemed evident t iat there was Just a two- 
alphabet substitution involved in al term tine positions (with 
refe.’cnce to the "rail-fenced" vision of the messages)# But 
when combined frequency counts were made on the letters in each 
of the two classes of positions, the coincidence was higher than 
random ’nit not high enough for monoalphabetlcity. Nor did a di- 
graphic frequency count exhibit a dc,gr<3e of coincidence high 
enough for monoalphabetlcity, although this also was much higher 


than random. 


i’urther 3tudy of the positions of repeats inaJ ly disclosed 
the f act that there v/ere ranges within each mesoa ;e within vrhj rh 
certain repeats never occurred; and, in general, that there eoo™ i 
to be two roups of repeats - each of which recurred within a 

distinct arxi nutua .ly exclusive ranges within each message 
Jont nued study, together with a modicum of trial and error , 
reduced these ranges to alternating 12-lettor double-1 in* : n 

of the "rail-fenced" version of the messages. ‘ ;lock ® 


■ 


3 — 


" ’• ( 




it 

V 

M 

IJ 

H 

j 


. . • 












CM 

\-\ 

• 1 

G Y 

J 

I 

I 

V 

c 

D 

p 

V 

T7 

V 

u 

T7 

. A 

S 

2 

B 

Y 

V 

A • 

P 

u 

n 

K 

17 

II 

ir 



FT 

ir 

T 

7 

T 

I 

T 

* 

il 

M 

a 

il 

i 

H 

. 

H 

u 

J 

s 

() 

a 

I 

w 

132 

■ 1 

TT“ 

■j 

y 

T 

r" 

i w 

o 

n 

j 

I 

I 


U 

Y 

P 

H 

D 

r» 

* . 

* 

1 % 

V 

i 

K 

N 


'> f 

u 



t 

j 

R 

S 

A 

7 

Vi 

G 

K 

ry 

4 4 

r 

D 

R 

3 

II 

M 

A.A 

V 

K 

T T 

u 

1 !9 

If 

w Y 

J 

s 

A 

J 

X 

P 

T 

B 

r 

K 

A 

J 

7 

r* 

O 

c 

s 

c 

£ 

i f 

II 

r 

1 

S 

— * 

n 

ii 

; 

S 

s 

Zj 

3 

T 

< i 

A T 

If 

1j 

P 

* . 

f 7 
u 

D 


K 

l F 

, r 
if 

*•» 

Hi 

L 

w 

... 

» r 
1* 

ii 

s 

F 

Y 

Q 

.1 

X 

B 

It 

Y 

5 

0 

H 

G 

L 


K 

!.! B 

H 

n 

G 

M 

i * 

F 

H 

R 

T 

L 

C 

*T 

G 

'7 

AJ 

C 

4.J 

?’. 

T 

ii 

<7 

Zj 

1 

H 

U 


X 

T C 

sJ 

u 

II 

L 

u 

II 

K 

II 

II 

3 

II 

S 

'7 

—t 

I 

F 

X 

U 

K 

K 

A A 

L 

H 

3 


V 

3 E 

D 

T 

X 

N 

U 

T 

R 

II 

B 

B 

* 

Z 

; 

L 

H 

Z 

C 

D 

o 

H 

D 


G 

o ;; 

B 

G 

• 

A 

V 

7i 

S 

■ 

il 

0 

S 

if 

P 

u 

t ' 

V 

A. 

T 

—> 

r 

I' 

n 

B 

K 

K 


<.* 

U 

j i.: 

U 

F 

.» 

* T 

i« 

C 

II 

F 

If 

A 

B 

G 

u 

T 

MJ 

3 

s 

B 

3 

K 

X 

F 

H 

U 


* T 

. • 

f 

1/ 

0 

e 

V 

7 r 

’I 

a 

J 

p 

H 

T J 

Y 

L 

M 

n 

K 

K 

X 

K 

Jj 

U 



I. s 

F 

It 

u 

N 

>» 

It 

s 

I 

0 

Q 

H 

D 

•7 

la 

H 

D 

P. 

Y 

.f 

C- 

K 

M 

V 


V 

V J 

P 

0 

Q 

V 

s 

s 

R 

J 

5 

n 

u 

K 

c 

I) 

%r 

.4 

K 








I 

S J 

7/ 

w 

E 

F 

w 

H 

L 

V 

S 

D 

R 

G 

U 

s 

Y 








E 

P 0 

s 

K 

0 

P 

B 

N 

0 

» 

H 

II 

5 

Z 

3 

Y 

S 

L 

H 

V 

F 

Z 

Q 


t> 

Z 0 

Cl 

X 

I 

:/ 

il 

S 

S 

r* 

a 

A 

▼ 

ii 

X 

r\ 

II 

H 

U 

H 

Z 

3 

D 

II 

F 


ii g y d 

COPY 

II X T B "/ A 5 

S I E S 0 V Y 


:.t .. _s then discovered that, by considering each set of these 
oc'-s er.arately the combined frequency counts of alternating 
ttersv/ere unquestionably mono alphabetic. It then became an 
s^Ssic to recover each of the four nonoalphabets so segregated. 
' c then discovered that the alphabets were key-vrord -maxed 

so iair~ of^alphabets used for each set of 

.so, - e .wi r f rorn the sane r.ey word, cuu 

f -^wpos^on “f plain and into consents varied for each 
.phabet. (See Figure 12.) 

... thP procedure used in enciphering this traffic was 

t. lough the ..roceaux rather complex nochan- 

>■ crvo to graphically complicated, M - ^ her in" orocedure 

' i - * the following recapitulation o. tno e..ci nerm . . 

* ■* — *• y 


93 


.'-raid • rov de clarification of the mechanics of the system. Tlio 

.rOVXQC . finv, n Q nh. rmfl I 


plain text was bitten out in Unes of 12 letters each, one under 
tb, stlier. Substitution "is then performed '..nth alpha, et - Q-- ■••• 
lot, 3 rd, 5 th, 7th, 9 th and 11 th letters of the let, 3rd, pth, ot. 
vTrc Ox lines ; ,ath Alphabet 2 on the 2nd, iith, 6th^ 3th, 

I?£w"' ettors of the s -'.-ry ** of lines: v/ith Alphabet 3 on 



^accocsive vertical pairs of the 1st pair of lines, then of the 

2nd „ir of lines, and so on (i.e., "rail -fen cine" each pair of 
i-ince of the cipher-text). 


that - - f “°f, “T 11 ** “ teils ot "Verfahren 1,0” v.ere known 
The SoTio;,-* rr . i°I! ■?” a!? 6 ^thod °f substitution was derived* 
it Is the only one so clr 7 V* 9 3e “;‘ 0c! u3ed in this system, but 

rations ^ “T 1TC i W “ ch; ' i ' 1 «Pl«in the aber- 

tho key word-rJLxed al-ha , -ets'*use? <• ai khabet. Suppose 
te written in 5 * J squL^w^^t « 19!i3 to 

P-accd outside " J ” ^itrarlly 


1 f-lphabet 2 Alphabet 3 
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- — k e tS V S e t n 4°r-- .*? F laln 

ar.2 *fr ■-? »- ? £ s 2 s: 


P-:-, for <>*' the S^" 

tbe'^'-T-',^' 97 c . ountin e 3 letterri^ n Ld r ,'o a0 i?- ?lain *«* 

f-n * «- *» of £°Z n Zt 

to be 'the £&£ f the ex ^ 

df'i tI'..r^V-! S ! al r hat ets, as well 7T7 '’purification 

- -ivans of ar, un-dj storted ’ ° n ^* r Wa y Possible 

- - j* WbG .-rev v.-np-L. • .... • 


•07 -.vord-riiced sequence 


JL« C t > ■ i m t » t 1 1 


PIGlTriK 12 

1U I 


— — 1^1 1 1 r » 1 « 1 1 1 « 
** flPUM .». § JL 9. I U, c » » ? ? 
. (Ui) . jl i i iio. *. »_ on j 
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« • ■ UJli 

» I IX M 1 
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C* ax m i. X I. I I » I 

.L x. x *. o i w. o. x x x » 



CJLJui 


1 » ■ « U,J. 
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WOTJ IIICDJ II 


FZTPHDCXFFI* 


H B I Z W 0 Z W 0 Z W Oj R X x c z r b e r u sjc 

/TTjBBIjTTTTw / KZBDRBHMVHU 

^HDINSVIDRXOH >UERSCHTALL1* 
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HSZLPXUXKLH 


, , , , . 3 « » » T . 3, 3 , 

^bedtxrotri b 7 ^ * eqliicbihd 

UMDIAMERADBH-^ *TUBDDAI KTH1I 
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1.4,1 i I I I 1. 1-A- 
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0 M A X R X 


D R F 


X T BAj>^ 


■Q-J C I P H S K I S Q ALPHA BETS; 

(Ciphw) ABCDSFOHIJKLVNOPQRS T U V W X T 7 
(Plain) 

1 KSBODCFTWI , 'aLEHMPJRAQUHVIY 

2 xnwkairjozvsbtucfdetqlhmpq 

3 TTBCIRUEZKSDLAlfOPJOFHQVWlH 

4 7srR J p ZATQEFTTBCDHlTRi (Mopi 

a i 1 T 1 L N — *- s *■ 8 » 1 ? b n miii m, 

££©' * I " 0 » 1 1 W I® * S B c T 0 l M , , „ , , J J 


1 » T n 0 D E » W I© , s B c rot,. 

9 * • 


HDENWIRS9CF 


Q v V X I I 


(Plain) (j) A R z I K H D , 
(Cipher) ) 

8 N Z I E H p 

4 S 3 P 1 s R R 
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C “ 1 * 0 f Q T » , t©» , E . 


fin 


E3* 


W 9 


POLYALPilA.fcTIC SUBSTIf :TTO;i /r T I niim, , 
TRANSPOSITION, J.vlJO.VSKi Lirirln N Jt 



approiinderS^pri^lia^^w 0 ; ^ f* 00 of a a *r»n agent 

w 3 nado available to this n <-fM >f to ^ nl Canadian Kountnd Po] loo 
back -round on the l ? ? ?!?*• llw rncord oonUine-1 u 'ood 

account of tSe * ?^ c * together 1th an 
t\vo novels with him- one wo« t * orI P l0 ^ 0 ' 1 b ./ fc hn agent. »l« had 
and keys for the *JL Tu * selected and uajd for oall nl -nn 
M achieved aelec ^ on to * rr*d# after contact 

added to theV.-Jw f 2 * nt 8 nufflb,ir (in thin Articular cane 20) 
pa-e of the bnnV f 5 antl a'onber of the month gave the 

al‘4 10 * U8 ? d * ^ different preamble keys wore 

traonni-q/rm h + :>n ® for th e first four grou ^s to contain the 

+S t , il7ie> „ lett4Jr chf5Gk » *nd serial number of the 

V li y® con< * ke 7 for the fifth group alone to contain tho 
enciphering date. The calls were extracted from t Y* pa-e of the 

readin^ from the lower left hand corner upwards for tho control, 
from the lower right hand corner upwards for the answer station. 

The te-vt .fas first written horizontally nto a transposition diagram, 
using a 20 3.ength key derivod from the first 20 letters reading 
townward s from the top left-hand comer of the pa -o for the day 
indicated. Then the columns were taken out vertically according 
to the transposition key, each column cubstituted by means of 
a su stitution key which was derived from the first twenty letters t 
reading do;/nwards, of the page for the first of each month, the 
substitution key rema ning constant for a nwnth. The reference 
letter used to effect the substitution ./as the letter in the top 
left hand corner of the page for the day indicated. Thus, on tte 
f.rst day of the month, both the substitution and transposition 
keys were the sane. For example, takin a different substitution 
and transposition key: 


Transposition key - 
(1st 20 letters 
readin • down) 

.7 R 

/ 

C 6 

LPT 

H F A 

j r 

p 

.t ii i 

U A ‘4 

.« R 

C S L 

P 

T 

H 

F 

• • «J 

F P 

A 

iW 

A 

r i • 

u 

A -i 

20 1$ 19 

5 16 10 

12 

10 

9 

6 

1 17 

7 13 

2 

3 

e ii 

U lU 

Text- 

20 1$ 19 

5 16 10 

12 

19 

9 

6 

1 17 

7 13 

2 

3 

3 11 

U 111 

n •' •* 

X* > m~* 

•• 

X 


i\ 

E 

T ^ 
a* 

X H 

A ll 

i 

IV 

R 

2 Y 

X X 

1 C H 

B I N 

s 

V 

iJ 

H 

R 

n TT 

U u 

*' 

X j * 

X 

* 

I E 

U E 

•* n 

U X i J 

U I T 

I 

f f 

h 

r 

ii 

U 

V r 



a 

Z L 

I C 



b fj 

ou -stitution key - T X 3 T U K G K 
Ust 20 letters reading 
dovm for 1st of month) 




'i n V U 4 y g 


Ik 20 2 15 9 7 ? 8iS t,! LI ;J ^ T 3 4 I D 

* y ' 5 0 10 1 16 6 17 11 12 13 3 13 19 u 


of° the sSSaid n alpLb^tf‘ en 1 " ±tten under the firBt t"«nty letter* 


^ ^ F 0 HI j K L U N 0 P ^ R S T e tc < 


lk 20 2 15 97 5 a in i u \ 11 N 0 P ^ a a T 

' 5 J 10 1 16 6 17 U 12 18 3 13 1.9 h 


rSerenoflet^ 1 ??t a <-? ta * tl ? n f y atan<lard lP*»ot, ueln; the 

the pa e for the dav) foF^ °" the top left hand oar tier of 

be obtained on l d , <* settin:;, readin : the ipher letter to 

eLwoS^ aShibet S ^- er the plaln 16X1 l««er m tbs 
To '^1 * , rn , th i s CMe Wis **» reference letter. 

ihe^f-a^^tton ,° f the <±lacra ”' the l»‘ter numbered 1 on 

the -'..ati.itxon slide is set under '.V on tee stationary alphabet: 


Reference letter 

Stationary fll 0 p n R 3 T 'J V(&x I 2 i B C n K K n „ t Tw 7 TVm 
Slide 


I 'lain 

k 


A B G D E F 1 H I (?)K L H !J 0 p y \J V ' ' (V*) 7 ( 

12 21 9 7 At i i n * * w v •• ) 


122197 58111611113 111! 

-** 0 5 0 ^ 6 7 1 2 3 39 


0 jv 


A 


For column 1 


Cioher 


Column 1 - 


1 

r 

G 

N 

0 


Substituted - 


1 

Y 

T 

A 

E 


Column 2 .Tom the diagram would be substituted with letter r , 

imaer reference », column 3 with letter placed under w, otc‘. 


-»»0 -,r*G ; uenci S 6clch 1VBI*6 f*OGX tod for* -i , 

etations different calls to be need ori ,«* fre^ 

r i/K1 : ccn intercepted on tids c se, ut coverage uzl 
L 1 * * ■ • tely ascontinued bee use tiie station w-. wlr u 
by the Royal Cm, dian I founts *olice It v ^ in °° V ' red 

note thr.t t hr ■ -ent toM + ' \ wS " lso '"terostln; to 

in tu, fifth ■ r'oup ln he even «" * tter ® * trtpUcU 

ont t - ,aT - ht ; c?4no oontrollcu; however 
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TOP SECRE 


1 


ae had confessed tills detail before an/ messa -es w iL 

The first ^ssagss intereeote! 4e sluSod^o 7 

Jete^une the actual application of the sys^! t0 

!• U-U HAJ.03URG-SP.vIN 

came on thG U ai^ , 1 nH^^ , f station similar to the Hamburg station 
procedure Two ?a two neS3a .es 'with the usual clandestine 

on°theair ^ the first transmission, the station came 

"vhen • he ^es^ USlnS different calls a ” d *°nt two messages. 

Of^oth COapa i: ed ' 11 was found that the messages 

transmissions wac P*L Wer ? o; f the same length and that the second 

a SfS-eit^nMnh^ 0 ? 317 ^ re P e tition of the first but with 
% ,;^ r ? encipherment. Further examination revealed a st rtling 

Sb^tit^tion °^r S ?K Je i° f the firat transmission tested for 
tested for* +4a e ... e 'f lrst messa ge of the second transmission 

.Then the J he second message for substitution, 

a se nent^? versions of the message were superimposed and 

substituted vp^ 1 position text was found repeated in the 
substituted version, it was immediately found that each segment 

transposition version could be extended on the normal 

TMqin+rt component to produce a segment of the substitution version. 

nun’ip'’ TTi '- ^ica ly stripped off the substitution, determined the 

onTL!f + C ° 1UranS ' and ^• LXed the long and short columns --all in 
one operation— , as well as verifying the Janowski type of 

. • * 3 1^_» p necessary v/as that of 

anagranming one message. Thereby the two keys vrere recovered 

+ B °? niessa - es were in Spanish and concerned 
establishment oi an agent station and methods of reporting. 

T; “ S . particiaa r case ;Tas ^e of the most flagrant vio- 
lations oi ciyp tographi c security encountered, and deserves 
..oarticuiar comment because it v/as committed by the controll-incr 
station. Unfortunately, no "urther traffic v/as intercepted on 
tins circuit aiier tne initial messages. However th« t V r~, 
served to give notice that the system provided for the a 
.anaaa -would probably be widely used by Hamburg. " 

2. It-L l IAH3UHG-GI JOH 

iwTter the situation encountered in Circip *■ 1. 

'.inch mad been intercepted for a short tine lffiC 

■“ “ - » i tsss&sa***? 


L L 0 T V etc. 


each column, i.e.* 

V G v; SN C C C C L 

Tie first four croups «urc found to contain the custonar/^reanole , 

and the fifth group was believed to nave tne encip. * j 

the ,;.st tv/o letters. The cipher text for the 

intercepted on this circuit (132 letters without .he - 

groups)* was run off on an I.3.U. tabulation >.u _n ‘® ■ on * the 

.orient completed for each letter (See figure 13/* -g, ' _ -priced 

theory that a tv/ejity-length key was employed, cne Wt . 

off into tentative columns, allowing for ei^t columns ofsix 

letters each and twelve columns of seven letters each. " ^ t he 

the lan -uage was unknown, generatrices were then selected 

ba 3 is of both German and Spanish. The oest possible „ 3 oa nish. 

for each column was marked in red for German, ,n green for -P^ isn * 

(See Figure 13). The generatrices were marked for six or 

letters which were best for plain text, out if thi . 

above or below the tentative divisions it made no ciifieren e. 

Some lines the generatrix selected would be equally as good -or 
Soanish as it would for German, as in the case oi columns ^ 
and 20 (See Figure 13). After the best generatrices were selected, 
ana Tan. ing was then attempted. Taxing the red columns a an^ , 

(See Figure 13) because of letters C a nd H: 


u 

r* 

s 

5 

p 

A 

G 

E 

I 

C 

H 

C 


L 

O' 

-Li 


i. ..as found that ail combinations fitted well. Tne, adding red 
col mi 11, (Figure 13 )> 


11 h 

zf 

s 

Q 

L' 

n 

w 

.1 

2j 

wi 

T 

T 

c 


I 

G 

:i 

U 

L 

s 






nr\ 



I MM 


TIl 

STU 
I 2 A B C 
D E F G H 
L11N0P 
3 C D E F 

.defgh 


PLAIN COMPONENT COMPLETED 

? ID 1112 13 y, 15 J617IS 19 202122 23 2*25 26 
JN0PQRSTUVT7XYZABCD 
RSTUVTTXYZABC 
E E F G H I J KLj.N0 

WKLIlNOPQRSIOVrxn 
KLMNOPQRSTUVYXYZAB 
JKLkNOPQRSTU 
RSTUVrXYZABC 


DEFGHI 
PQRSTO 


HI 


p Q TJstuvwxyzabcdefg 
XZIAJBCDEFGHIJKLMNOP 
JKLMNOPQRSTUVWX 
OPQRSTUVV.'XYZABC 

hizabcdefghijk 
LMNOPQRS lUVrXIZA 


QRSTDHX XZ A 6 C D 
RSTOVU YZABCDE 
QRST0VUIZA3CE 
XYZ abcdefuhijk 
XYZABCDEFGHIJK 
M N 0 P Q R S T U V T X Y Z 

M 


D E F G 

U V W X 
W X Y Z 

V W X Y 

V Y. X Y 

W X Y Z A 
STU VY 
N 0 P Q 

C D E F 
D E F 
D E F 


N 0 P Q RjjSlT 

v n y z ! a 
Z A B c D E 
X Y Z A 3 C 
X Y Z A B C 
G H I J 


fghijklmno 

ghijklmno? 

fghijklmno 

mnopqrstuv 

mnopqrstuv 

B C D E F G H IJK 


D E F G 



yj v X IZ A B C DE 

bcdefghijklm 

FlGHI JKLHNOPQ 
defghijklmno 
defghijklmno 

RMOPQRSTU V Y. x 
K [s] T U V y; X Y hbc 

ghijklmnopq 
IJKLMNOPQRS 
HIJKLMNOr'QR 


Mq 


IS T 
T U V 
STU 


JKLlillOP^RSTU 


T uvnuAfn 


JKLMNOPQ 
F G H I J K L M 
aBCDEFGH 
P G R S T U V Y. : 


R 

N 

I 

X 

X 

X 


CPE 


LilMO 
C D E F 
E F G H 
D E F G 
D E F G 
0 P G R 

E F G H 
ABODE 
W X Y Z 
L ii N 0 

KLMNOPQRSTUVY 
KLMNOPQRSTUVV.Aiz.Afc 
KLMNOP QRST UpJ|T.’lxiY ? A F 


S T U V 
0 P Q R 
J K L M 
X Z A B 

n a c 

X Z A B 


" TiWVT' 


r 


xl U* 

'"'"“'.’t'Tii’? 
; “ { :: : ; ; ! » > - * « * * j ; • 

X £ K <wDirOHiHl \ ^ ' P 

j I i *} (• i H 1 1 * if- i H - fr 


p> j' i.' *-’ t > 


a i f pi r a i n n ii s a r Q 

V I X r t A !> C B I r 9 X IJ KL » 

k- x o r v xis n> v ii n u * c d 

,t n : A ICDIFGHUXI VN 

| X X Y 1 A ' 0 V A r >1 H I J U M— 

TTT” r v ~ .» x v « a > r k r !: m^J J k i v k v 

l' I> K r C M I J X l IT K 0 F Q R S T U V A X T Z A 

r ; X S T II H X T i A ' C D U' G H I J r K 

T U V A IT 

L It K 0 P Q R 

K P 0 M t J K 

k V .1 T 


u n F H I ,1 II II K 1 0 F s R s 

rPTumuos'' cum 

HOPsXSTVVA I Y i A A C P 
\ X 0 F S $ TU VAXTXA »CD 

1 . J 1 1 1 1 u » ■. — - — 



li 


12 


i> V T ? « H ' J K l v k 5 

~F 

*■» 

R 3 

T 

V 

V A 

X Y i A B 

9COBFGHIJX1 V N 

0 

r 

Q H 

3 

T 

U V 

A X Y Z A 

•COSFGHIJX1 UK 

0 

? 

Q R 

S 

i 

1) V 

,Y X Y Z A 

A9CDEKGHIJKI V 

\ 

0 

P 2 

K 

3 

T G 

V A X Y Z 

K0PQRST0T4XYX 

A 

«* 

C D 

K 

F 

G H 

I J KIR 

G H I J K 1 V N 0 P „ R 3 

T 

Tj 

V A 

A 

Y 

L K 

3 C D E F 

£FO H I J K LU 0 F ; 

3 

3 

T U 

V 

A 

X Y 

Z A ' C D 

D:FOhIJKllIKOF 


K 

3 T 

u 

V 

% 

■Y X 

Y in C 

I J K I VHOPQRjSTr 

V 

A 

X Y 


A 

R C 

DEF5H 

'• V tfXTIAICD'EF G 

H 

1 

J X 

L 

y 

K 0 

F ; R S T 

timUA3CDEFC 

H 

I 

J \ 

l 

V 

N 0 

p ; r s i 

G HIJKLMKOPiwiRS 

T 

\ 

V A 

V 

Y 

a 

iCDEF 

Fl '■ s o r a s t J v w 

X 

Y 

l A 

i 

C 

D E 

F G H I J 

IcjJ iPGHlJIU K 

•s 

V# 

p 

x R 

3 

T 

U V 

•Y X Y Z A 

r j ./ x n A P C D E F 5 “ 

I 

J 

K I 

v 

N 

0 F 

; R S T u 

frju HIJKIMNOPQ 

R 

3 

T IT 

V 

A 

X Y 

- A 3 C D 

JlfFGHIJKl V N 0 r 


R 

3 !T 

u 

V 

A \ 

Y 2 A > C 

/l r G H I J K i V K o F 


R 

S T 

u 

V 

A X 

Y Z A ■» C 

LAI 3 C D f F G • T J K I 

L 

K 

or, 


R 

3 T 

’J V A X Y 




|£ F 6 ; 

/ i 

J 

K I 

V K 

0 

F 

r> 

ft 

3 

T 

U 

V 

.V 

X 

Y 

z 



C D 

Y 2 A q 


D 

K F 

G H 

T 

A 

J 

K 

i 

V 

N 

0 

r 

4 

Q 

a 

3 

T 

1 1 

L. 1 

V 

»i X 

IJ K I 

V 

N* 

0 P 

^ « 

S 

T 

t’ 

V 

A 

X 

v 

4 

z 

A 

A 

C 

D 


F 

G H 

D i F J 

u 

T 

a 

J K 

I l 1 

K 

D 

r 

4 

* 

a 

3 

T 

y 

V 

.Y 

X 

Y 

] 

A 

A C 

H S T V 

V 


x r 

2 A 

l 

C 

D 


F 


H 

i 

y 

0 


I 

M 

v ! 

i A 

t ^ 

IV K ) 

* 

« 

.9 S 

If* M 

4 v 

V 


X 

V 

( 


A 


c 

T) 

V 

p 

r 

r* 

u 


I T 

4 1 

J K 

1.9/ sir 

£ j 

1 

< y 

2 \ 


p 

2j 

TJ 

F 


u 
« » 



K 

I 

M 

V 

A 





17 


16 


1 P ' -1 -'j ' ^ 

J.lVi: : ; r! H 

V 7. r 2 A ^ x Y 

,, v 'i r C R •» • L „ - 

, yN «.v"A :J CDEF 

lr ” v T - - : -u^-ffH*rtr^c 
ffTTT '• 'n'ciitP!’'!’.! 
c * s 1 ? r ? ; J f r i a i J « i * * ? t \ 

XU | ;|;«JSS5SSi;;i-IS 

r - : s I u V .S -U 2 A ^ - 

p ; « f I D V V I Y Z #. B C D E ' G H I 

IJKLt'NOFQHST- ■ v v 7 A 3 

CHIJKLMKOFelRjsIDV.XTZA^ 

K L k' X 0 F Q « 3 T U V It < - ^ A 3 C ” 

P V ,? X Y 2 A 
, X v Z A " C U t f iu 
J J K I M SO F Q a 3 T U V »~X Y Z A 
PV JX y Z A p C DjE;F G H I J -<L 
H 1 J K I fc N 0 F Q|Rj S T T J V ff X v 
DIKflHIJKtnOF 
F C a I J K I K " 0 F 


c D E r 

-j C P r. ? ^ ~ - J 

TTaTTTTTs 
PEFGHIJK- 1 * 
J < I M 

UV*'XYZA a CDa? 

C D 



H I J X I. 

U \ (?_A 


n p 


19 


H1J 

a 

i i* i: c 

3 C D 

t 

FG HI 

F 3 H 

~ 

J K I 1! 

r v a 


y • A 1 

0 F Q 

R 

S 7 U V 

o ? ; 

a 

S 7 U V 

0 f ; 

R 

STUV 

U V -V 

X 

y z a 

fl* C 

•a 

r ° tr 

fh fi J K L V. V 0 


Q R 3 T U V h 

a 3 1 U Y fi X 

0 F ; R 

T U V 


C E F 


A ^ 


£ F r. 
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y-rrtcjx tri graphs resulted, Ar.a ~ra:Tiin 3 s continued by 
:i jd until the nessae was completely recovered: 


1 1112 111 
4 1 9 6 2 0 9 5362 


811 A PPfi 

-SC H E u 


^ '* **• rf A 

EH r t> 


. A 


K Z 


i REIS 
1 E Z " r 
b C ?. U E S S 5 A H X ? 

xfhdehlichiv 


L S E K X X 


T 

t> 


li l 

- 5 3 i 4 5 

T T\ V O C ", 

— U . 

S M : ?. A G 

SI _ .. E I 

->••»- — - -j 

E H L I C i 

..PAULS 


In Fir — 5 <»ith the columns and generatrices correct?!, it mill 
-e seen that if a generatrix were used (or selected as the 
correct one) no surer generatrix in tint column could be used. 
Also, the six unused colunns show up in a stock together. These 
two i -ctors greatly aided in subsequent solution of messages in 
this system. 


lircuit li— L used a constant transposition and substitution 
ley -or a snort tmme '.ruth the messages being in both the German 
ar.s o anish _arguages. IHirang this period both control and 
answer stations used const nt call letters. After the circuit 
i*ss an operation, the stations used daily changing calls and daily 
changing beys, with the language being entirely Spanish. The 
proa- le was also changed to an indicator in the third group for 
date and lane of page to be used* 

3 • h-F ' 1-1 "IT.l-MIPhll) 


_n February, l?u3, another circuit v. s discovered which was 
found to use the new type system. The first message intercepted 
:ns a completely filled rectangle (twenty letters in width, ten 
letters In repth), and by completing the plain component and 
anagrcminp the best generatrices, the message was recovered* 

For a short while this circuit employed the customary five- -mm- 
preamble (first four groups for the transmission date, time, 
letter count, and serial number of the message, with the fifth 
jroup indicating the enciphering date), but on Parch 13 uh four 

■acteristic 
.ng used as 
..st two 
7 possibly 

4-:- . 4.\ 

w — - *. M 

atrix in conplet^ng the .lair, component ..as devise 

r.mc# 


:h did not liave 

this C: 

■ the fifth group was 

date contained 

ir. the 

> for the 2 ’G 

Df the 

additional ai.. 

ir. cel 

ng the . lair, c 

emponer 


Ik 


COIT'JXS AND GENE7AT P-ICZZ CCP.TECTED 


iim 

j s c die 


r T 9 10 n 12 33 24 15 26 17 38 2£ 2D ZL 22 25 24 2S 26 

7 :r ' :: if J :> i: 

FG *— t :;:,H o > <| 


p Q p s 
p c d e 

GHTJ KL*i#) 

XJKLtfNO] < 
p Q R S T n 1 ’ T :; ; ; ;; A , c 


t ij ii » t T ’ t ^ 

7wX” 


-r v :: 


$ 


N U P Q R S \ 

* X T Z A P 
E F G H I J 

JUHKO 

HSTD7T 
H I J K L It 

J K L ?/ >: 0 

wrm 5 ii 

w X Y Z A B 0 3i ] 

V 77 X Y Z AItjl 

C D E F G H :: 

c D E F G H :: 4 

R S T U V TT J t 5, 

I V N 0 

T U 7 17 X Y 4 

n Z A B C I 
Tt V1TXYZ A’ 

T U 7 

C D E ? 

J KLHKO 
A3CDE? 

C D E F G H 
B CDE FG 
3 C D E F G 
!f N 0 P Q R 





i z \ : 

: c 

E f 

N O ? 

) p < 

> T ') 

MO?, 

I R J 

: T <t 

NOP. 

1 H ^ 

i n 

NOP. 

: R ^ 

Lii 



nou?£ ccH* 7 -, 


Y»R 





[IRA 


ni??v? I: i:!;!:”^ | 


rstuvttxy 

UYTXYZA 0 

SFGHIJ KL 
BCDE FGHL-i 

^'TXYZABCD 


F G H I J K 


BCDEFGHI. k 


STUVTXYZ 
CDEFGHIJ 
B G D E ~ G II I 

IJfTXYZABCD 

0! r IJ KL11NOP 

s : • u v r x y z a b 

FdHIJ UMNO 


V Z ABODE 


T U V W X Y Z 
T U V "XYZ 


IJ F L 1! N 0 P 

H I J K L M N 0 

H I J K L M N 0 

G H I J K L l! K 

T U V TV X Y Z A ! 

EfNOPQRSTl 


K L M NO? Q R 

J K L M K 0 ? Q 
0 P Q R S T U V 
A 5 C D E ? 

A B C D E F 


?.f ?? 0 P Q R 


R S TIJ 7 '7 X Y Z 



IJKLMNOP 



c 

o 


. 

3 

C 

D 

TT T i 

•j r * 

T 

f 

c 

u 

T 

U 

tt ir T 
V • i A 

l - 


^ r 

17 

i* 

o 

P Q 1 



T 7 

r 

X 

Y Z 

■> 


TJ 

V 

V 9 

\ i 

Y V 7 

- k, 

1 

U 

TJ 


v y : 

i l 

> 


p 

S 

T 3 1 

r Tl 

[ i 


V W X Y Z 





y 


> 

. 




Y 


U 


T 




MT 
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FTOtfRElU - 5 ■'TEIU V D 


14 


15 


16 


7 

I 

rf 

Lt 

H 

X 



I ’ A B C D t 7 C< 

J K L M N 0 > '1 P. 

A S C D E F II II I 

I J K L M N O » ■ 

^ p r, t u v r 


D) 


12 ! 4 S 6 7 8 9 1D11 12 13 J4 1S]£3 17 1819 332122 23 312526 
Vlwl HZA »CDSF ) I IJ K L M N 0 Q 
21 aIb C D E F 0 H I J KI.VNOPQP. •* 

D E F 0 H I J K L J' I! 0 !* w H 3 T U V 
S Ttl V7T7YZ ABCD 1IFOHIJ K 
• D| ElF 0 H I J KL" IIO 'QRSTU V 

f 'v| xlr z a pc d e f a h : ' j kliino 

DLEIf Q !l I J K L in 0 , P r, T U V 

1 r stu vr hz a n c i d | e f o h ij m 

L M N 0 P g R S T U V W 

17m A n c D F MH 

N 0 P g R s T U V V- X Y 
VFTTZ ABODE F G 
DEFGHIJ KT, MNP 

rr 2 2 Z 2 R S ? U V ^ APCDeHS 

J W ‘ Y z APCD2FGHIJ K L K H 0 P 
ZABCDEFTPIJ KLL'NOPQP:!"U 

5i2S DEroHIJKLI 'NOPQR:;‘:u 

o D J m r A , ? C D E F a H 1 J K L M N 0 :»'(R 

x RSTUVWXYZ A ** C D E PGHT L 
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/* * f or letter A, with the letter itself at the top, the 
r-nrlcs of numerical equivalents starting with 63 ;for A) throug h 
10 (for Z) j for the letter 3, starting vd.th 3U (for B) through 
(for A), etc. 

The total length of the message v;as divided by twenty (the 
length of the key ) in the usual way to get the column lengths* 

The \ ong and short columns v.-ere placed fairly evenly throughout 
the message* This, of course, caused a margin of error by 
oiacing some letters in columns where they did not belong, nit 
not enough error was introduced to affect seriously the final 
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SeneratrU 16 win apply for oolum 9, etc. The reference letter 
used for this cxtioular encipherment can be found by placing 
the si;: unused letters of the eliding alphabet under the known 
unused setters (U through Z) of the stationary alphabet and reading 
the letter A, Thus, in this case let -ere 9 through Ua, or I 
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null letters theaaelrea were fro- • 
anble consisted of the first flee groupe, the first ft 
contai ning the usual precis, and the fifth -roc x 
check on the encipbsrii* date. The fifth group k! 
the key used la the first four g roup s , i.e., 

1231*567890 
iUI H3FS9C 




This method continued until the Kiddle of Soever, 19U2, at *iiefc 
tiss this circuit changed to the type systea previously Ascribed 
under S-2. However, t-d.a case Is the on_y on* aam to this office 
in which nulls sere used with the *Jaaowski fl rwtew. 


In April, 19U3# circuit li— I changed syetea* again. Their 
return to the use vf "JanowafcL" type was discovered by t*m British. 
IXirin: toe life of this systea (April and Hey, 1910) the key 
e-p_oyed wus a 22-length instead of the usual 20-lsagth key. \a*»h 
of the traffic was read, end on one occasion it was found ti*t the 
dec! hered -essays prewed to be a transposition wastes, obviously 
a relay. .£th this faet in wind, it beesae possible to solwu a 
Janownki key for two previously unsolved uessa as, both of which 
..ere dpi. r rela;e of trine -xwiti on nessa es. 


ie.e.vl aon the Uter these three trareositia* asssaree .ere 
iwientiiiwd definitely as aessajes ori ana__y treamtted on t 



dLLf fsr on t 
which led 
circuit# 
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— " " -"as-rai 


of the factors 
^gn* traffic on 


pOOBie TRAICPOBItioh 
i» bk klin-madsid 


This warn the first dooM * 

br the Coast Guard. Traffic i_ tp *» 8 P<*itio n C ir™<* . w 
-^ssage were . endph^f *« 

^enaent of the ^oupe 


fl# ans of • nonael alphabet w ??5 lpherB ‘®nt °T the" i 
^•tor. deciphered into withV) t£s. 


(•) 


0 >) 


The first 5 digit, ran^ ^ 

p *«" ■* • hook. **'* •*- *00, IMlertln, th. 

Th» n#*t 2 digit, ran^*.* i 

Mbn. “«•* lor Waugh to IMlo.u . u*. 

(o) The next 4 digits ran^ /, 

* , ,mt * t*m lotoao. 

<d) *» l~t dljlt «, not « taUu ^ 


It seemed obvious that the mi* 

»s wwsSsHS Sftgaaa. 

th.tw.iMy.. 4 5*Jr!^*; **5"*»* e# .«» '**»•<* 

tor solution, tin. *erifyia*Uh. m — 1 1 

***• In^e.torT Jpi t£lS£i. < v.£ !r ’ 1 fL?’* 

found th»t th. tn. key. read la m£m». ***•• tt — • 

next successful solution on this traffic involved raa*< 

°[ “J b ^"« ~ltlpl. of th. product of th.^iwth. ubloh 

ia, if anything, an easier solution than the aforwMutioned one. 


Another type of miccssaful solution resulted in the case share 
the length was one and one-half times the product of the two widths. 

In these cases, any tine two adjaeent numbers in the first trans- 
position key differed by e Multiple of 2 it would be possible to 
Align the corresponding rows and one-half of adjacent rows from the 
second diagram. Success was also achieved with eases where the part 
factor constituted one and one-third, one and two-thirds, and the like. 
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3189 6 
Hu r 
I 0 T 0 
RXS B 
I » T X 
BBS R 
BOX X 
HBI R 


column containing an V for ABBOTT* 
X for tho punctuation after mats, < 
graph RIB. Only oolaan 16 of tho A 
lho lot tore aro roarrongod into tho 
la thus 


a 6 for 


A and Bf o r a 
r a O^hTlnTtho 1 trt- 


all of tho A group 


1 1 

8 8 9 6 6 
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8 14 

10 ? 

N K U N F 
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I 0 T X 0 

X B B 
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TBIIBWOXDIBAIIUBTTDBS 
SBTX1BOUBVS TIOTXOIVOl 
UXII8XIDBIIIXBOB18T1 
ilDiXOXBDIIBXITIXTTSf 
OB3XXRA TDIBTBBSCR4BB7 
0BRBIA18XZIVI0ZXX01AI 
UVQDB9DBU T8C HIIFIOFAO 

fh# mom d i r — p o rt Ui toy U w wtii by vuTm&a* Bit 
abort T Hum of tost u follow* 



GE»BRALSlTut»! KU,, l r TDls 

dbsxxha?jj;e jozixoSi; 

UH0D*R Dlu i;VER3 CHASR J 

AXDAXDIi D gJ?H*»PRorAO 
A*IE1S lRDilJj; T *lTT8? 

*BTXB*o U i5Jj;iKQ ttST J 

HS tiotxdbwoh 



Since the second literal kav • n 

**• BcamtLmm* possible to road additional traffic S 4% 

psnding tha ke y firat reeorered - 

uaod. • relatively sail portion of this trafflo 

It waa noted that, in thia o Irani t oom eve had haon sxsrcissd * 
•void tha cases which wmld ba favorable to aolntlon by tha waa 
deaeribed herein* In feat, the — of oaaaa ei f y t %ha firat aa> 
ciphering rectangle waa completely filled— thus allowing the 
sibility of oolam ther af ron to be lneerlbod in phaaa with 
other in tha eeoond rectigla wera relatively foe* 


solved* 

to 


/, the tndloetor waa redwood to numerical group 
(it waa believed by the Britiah) the aafcer of the pace 
in' tha firat S dlflte and the ante* of the line in the laat » digital 
to thia eaa added by non uarrylM addition a oonaUnt S digit gronp* 
Prom tha lina ao detaralned were selected the firat 4 weeds for the 
firat key and tha firat 4 eorda trm tha Una follMing foe the aeo- 
ond key* An absolute aolntlon for tha co nsta nt addi tive eaa never 
obtained, end eo no traffic in the ~ 10mmA ‘ 





H-. .*?* *» « PMdl v * 5 ? *** 4 * w 

*» the r»— ^ T,IU | th» control 




&*£L 

*£*on bad • raw £*- 

2 STxS: • - 

jjttar aquivalante for the < 4 p hw «• 

i S 5 1 f ^ 

b *hlor 5 » 5 x 
cfimps t 

Ttm middle lattar of the m*. 
aacoad latter* gar. tha c*y af th?J^v 4 ®^ 11 * ^ 
dirfarant letter, la the fOwthaJ/JJ^* 




Thl« circuit changed thalr irrkM « i^y t , oL . * 
similar to that firet used by L-c/ and }* }*** . *° om 

sin.- thu «. of g agy 

aqui valent* for the did to owe solvwL 

proved to ho dorived tSm* ta? ** 


1 2 3 1 »$ 6 7 8 »< 

D2BIMKTVDL 

CHKAFOJOPQ 

STTXTI 


Son* months la tor attention was directed in mother system to a 
Soman pr om rb weed ss a key. and it was obsorod that tt» 
above key coold bo ooaotmetod from the um prcoor b — 

OEB HUS?. TREU DVD U 2 XJCSXIT. 


«- i«i 


»tor>, it «u 


I — - 

%z°r£:£ sz sur^ ^^ssniis 

(“■""f??. •” - OOTMI. t- • "•• nr. — - 


CT.FW* tajm 
^ /irrt Him *» 


*2*^ Addition to SSI* !£* °Sf r * 
ten lino* of «n ai * cho# * 

- - 8 **• P*ge, with tha 

^•noo portions of 

•d many 

dsrived. 


,**7 xu--v ■ P ar tlaolar favnwT T* **«•* wt 

J^aaaa k«y» wore npMtm tlU^Sd alS**' J* 110 * ******* 
oaUa* solutions to bo made «hoa ™* «»blod 

I*. •«• «»ooMfol oolutiona vers aehfl *? b *« n <**-—• 

literal kV# axpandiiig or oontractw chi8ved without tha 
uaad to tho lengths designated for ^ n ^™ aaerlc& l keys prsTiously 

“‘••sage under study. 

Tha cdrouit changed 


Tha airomt changed November h 1 01 , 

nomarioal indicator aa 1 h>* and aoiS-M ^ *° **» typo of 

solved other circuits using **• British had 

oases the key book was Wt ohuS* * ' * indicator and in *L 1 such 

circuit wae continuing to use the oi!i JtZ !**, “•nasd that this 

partially confinSt? the **• 8t ^ 

(non oany-over) that had been used* **" * dditiT * 

certain values for four figures of this add? *° g8t fairl y 

fourth, ana fifth d^ta) «"*• MCond * 

higher than 2kO and tho i*»» Mv __ “• T « r 

no contradictions found on theory bni i ?i*L tha, \. 26 * Th * r * "* r * 
M y fjui +Jvfwt f *4 r *4 + n# 4 « yiioiyi but It wai not posiibli to 

-i ?* atna * thw. ««. no limitatton. 

arsM*. 

saw 8 * 

second encipher key uaodj Jy applying thie to tho cipher text, the 
mo*s4£0 tould than bo reduced to single transposition, with an 
unknoun key length* This night haws yielded results, tedious as it 
wae, and did indeed result in tho probable elimination of several 
digits far this place - but in the meantime, traffic from this 
oirouit ceased. 


The book used by this circuit to derive their keys wae 
approximately 2h 0 pages in length with no more than 26 Unas to the 
a e* It was obviously a translation into German of some detective 
story originally written in English, but despite intensive efforts 
bv our office and by the British, it was never located* 
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Tide d*r»lopm»nt ob*iou«ly ~ m tho ~-i .*4 

ooluun* 0/ ooth Icmyrn— «ubJ«ot only to * 11 

location of 2 column* in each* ^blnally determined 







f * ladlvldMl wctiooa f*» t*» fl-at tvjpst^ja 
mm rapaatod in diffaraot aagaaaaas ana aetliaac is va 
d~A T^aS# It OAB 09 MM fM* tM« — HI MM tit Vi tll.TM 
firat citad Mtra t int la a M a ni la 'aetMe i nil Mi ZJ mi HZ) 
iommmt, it oan na*dUj ba mm that ioori^r ia *.v « rxji it ma 
not a nriaa faotar U tba r + oom ry of VAa iumI tay-a — \m 
similar idantltlM la *#cti«f I and II bd^ tba MwtUl r mwr 
of t:* solution# Tha nfedlvislae of vam -ii rw iato win mm 
indio«tAc that tha first faqra «ara Also a width of 20 «d w? 
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#** rwrB am follow, x key, which r^ lt#d ^ 

ymvcted Venltm i 


*hl« »olt 


X,t* 17 i 6 U, 2 7 , . 

- ^ 7U 1U1S "“ rVlUZ^v , sww 

arii^nal Tenrtonj 19 * 9 16 2 lo 3 u 

Uts 10 U 5 U 2 A , „ 

2 ndt 5 18 13 1 Vi 1? 00 x , 7 x * 13 IK „ 

6 12 10 7 16 ^ X J 20 8 12 10 9 17 

In a^maec Ut«r»l k*y r y 4 8 l 7 2 9 3 n 

corrected ver.l*, for the f lr . t k)Iy ^ tf- 


koembkcksrmanmsi r 

end it no* iC,li 

the literal key -ith ••°°nd key v/a . h x-i 

letters to the .£, th * *** *•*»» end tren.fSS™* SSfS* 

l8ll *»*suom muoi 

** dwiT#d *«• th. 

»J?rf “* «* «fthe ST^i 52?“ n °** used th > "rone 

«Odld conform to the* eirait^, *£°*°<™*<*U Utwj k^whioh 

8 D 2 N ” 2 C f | R « * „ a s E L „ E „ 

the .tesssc* ddr * ot « d to the ease of 

the Manipulation of the literal key and #5? *** Ucht of 

employed in the solution of the Se?t22>2 °*** fUl t,ehni iue 

w I ivd su 5 


«S 14 , U < u 1 6 1, "« u > WU. 

*• — » «5i5 S Si £„» _ 


1 11 15 
15 8 9 


r* ft* 
'ttr— 


~^.hort 


of 


Lfljlo dl*pl*fl«»ju.t of two portion* In «??T aeQOnd *"7 WM »roly a 

2 ?u*f 67 r °^ n ft ag ttm P**™ <rf^!nb?rI 1 ^v PO ** ibl# Motion. 

t/» J*^ *° 44 that wtiwr of the tUTc^t f *** ^ ^r.iona of 
in *Z tamaUn/rpooltlotio two poooibdT ?** 10 m retained 

rmrnion* of thm kmjt P°««ibUitie. resulted for the 

a) 


0 9 3 7 
3 7 2 1 U 


( B ) 12 13 16 10 5 fc 6 1L 

11 1 12 13 16 10 5 jJ 




» 7 

6 lit 


| J 8 15 11 1 
* 7 3 ? 8« 


It would have boon relatival* 

theao poaal hllitleaj but. with thi *? with oaoh of 

J»7 » till ft*aah la wind the 1 ■■t%* > ^ F ala UQn °* Soptoatoor 
poaalbilitioa for tho sooond y^ r ,.? ®* #ach tha 

in order to rat an idea of which "”*P la ?« d ** **» *"EiiwLng— 
probably hara boon derived fWj- . n J7! rlC ? 1 , ■• qu * no * "Aght nor* 
when located la thia J^**** 1 k#y * Ca *« B (above), 

2 7 3 9 8 UlllBlJUuj. 

" “ ? lifSL* „!*■"«***«> «£Jr 7 .£&*2 
n. ITwww £/5rj tSTSJSLT ,£i* 

tha previously aaauaad literal k^)^it *“ dBrived (**»» 


BECKfcRUlHNSLEDE 


R 


It wan not until tho cap taro, in the fell of 19U3, of Front 

^ “ Te !* r “» 2* u » " b T q J® t for ~ r ^ to this orflo* of 
‘f 1 ® •** m * on M* lnt « rro :*Uon that tha remainder of 

tJio traffic on thi» oirouit eould be read. The detalla of tt» 


asrirtne tbs k wys (which was m 

— "C PTTTSIMIIi.'J 'TTYpn in.. 




** , f ^ RITTER® UU ODER KN4PP 
pi c.^- IJr DI£SE ' J •SCnLUND? 

.jii -OlZAZX 3ECHER MffiF ICH ICN4B 
.JC& r>:r£N sc now iut i® der sch.j^® 
JIH IS* BECHEft KAI-m VJSDEk zej ;en 
^ lit' IXitiLTEN ER 1ST SEIN EIGEK 


(T?ye underlined portion ie that , , 

ire salred) in the two .^oh 

a. ha nonth da ter mined the pair of Uno. 

'or,' */as derivedj the day of the month **°® which the numerical 

latter *n thi. pair tfUllL th. mi**r of the 

til o sooth t on Liwtwrminwd the ^ key was start® dj 

tide point/ sod ths nocth — T of attars takan fro. 

which wars transposed fro. ths ba "* b * r 01 letters 

in deriving the second ker. The ^’. nain f *ad of the firmt key 

th. nonth -r. e^^.-oj^^^osnsr^ * 



Jan* 

Apr* 

July 

°<*« 

Feb* 

Uay 

Aug. 

hov. 

Mar* 

June 

Sept, 

Dec. 

Lines 

1—2 

3-4* 

5-6 

^in. Lenjth 

lit 

15 

16 

Transposition 
of Key 

6 

7 

8 


Coneemixt; the minima* length* If, after taking the minima 
nunoer of letters, the end of a word had not been reached, the 
word \ ms c orpletad* It was this fact which, more than ary other 
iBtnrftnwd w. th ths solution of additional messa.es transmitted 
at tines near ths dates of the two which v/sre solved* Had this 



»-M n»Ni .in-anurntfiNA 



ET ULTRi 



m' 1 * * 

rruwpMition tr.rrt. ... 

tw* IT n, * ul * r ••»*•»«. urTT.’ U TL rir,% ln ii 

ivib, u*. um r** “ •• un rrrTi_ 

««•*< **•*“» «h««. l„ 

,•**••, Ilia* 

th 0 prmaribli 


INI, 


lit 


•w1«l 



no *uoo*m vu h^l 1 „ . 

until • NMI|* Iran— 1| | x j _,*??**_ ° i n %hla 

Jlrtfcl-h and th. kajra ■**•« by 

Tho particular* of this 

tho "»»N. waa uo Utter, — TSTnlllL*! Th. l-«th of 

th* ••rial nuab*r of th. * , ^ ,r In th* prttebU «- •» - 

•a* a width of 10» 10 t ? Th# Tlru% an^pSarlnt h«y 

*v .« . width ^ u, • , V. » •• «— *-SS2i-7 

'"f “ "WH !»,, rt,"" U 7 » * < *• Th. plain ft 
Uttar, uawd .. null. ” *V » lo-fTfnay 

Oiraory atfpt. w nMllt i~-fr«|.«>v ™1L. 

fc»J» uaad| but owing to thoir Wmw k * 3r> fwr th * >»wl««L 
waa f«lt whan thl* w— frultl— * i.'JT? J°° k ** n d *«*PP«lntaa nt 
that th.tw.hv. rwcorarad ££ * *— 


s^sa.-=s sesJSSE&t**** 


0 I X f V 
3 X X I V 

1 J N y K 
» L Q E f 


J 0U03 
LIMLg 
ITIll 
USQD 


N I II u 
» » T U 17 
1 X X X X 
ITHAQ 


niQN 
T T I X H 
N Z X T X 
W LI I | 


A X D Z 1 
L T X J T 

Tun 

N X I LI 



x Q H B I 
Q H WT Q T 
DISIQ 
X T S D T 
AHSFO 


C I X B 1 

mwqil 

If L X I 0 

E 3 I X L 


X A * Q & 
I K U X X 
H C T ▼ ▼ 

Q Z TJ X B 


I Q S R T 
L Q R 0 X 
X 0 X R C 

▼ S T 0 « 


that, within certain ■action* ^ . 

letters (Q and T whieh 

plain text) racurrad in mr- 

'tv x-., thfi’p«riodici^ j 

and of tha m-| i prwvicealy read, it wee ttoaioas that 
aanifaatatlcn at tha a mm pro c ad o ra> 

tui** 1 ** 

wars two striking points at art tha location at Itoaoo mlj** 

, mt they ocoarrad only within certain sagpanta of tha dphar 

occarrad in parlodic order when present. Only triaf con- 
^rSation va 0 neoeeeaiy to realise that both than# points indicated 
fhrtths first enciphering rectangle was completely filled. Ter •± oom 
*"* i Jim- ranraaanti transcribed in naasrioal order fron 

tM Mca* wlptartn* netad*, th. abMoo* <* «nlU 
.JT, tfiows a limitation of tha point at whieh eolnans from the first 
enolsharinc rectangle eoold begin and end in their horisontal trans- 
cription into tha aooood enciphering rectangle. And, a inoe i n an y 
coluzm the mile apparently reearred an eq^al distance apart ^«rti- 
eally in tha aooood rectangle, it la obvious that colaens from the 

first enciphering rectangle ocold begin and and in the ewe ^ori- 

sontal position only after a constant number of eolnans from tha first 
enciphering rectangle had been traneeribed in tha intarssnlng intor- 
nl« These two eonditleaa eon Id only be satisfied by all eolnana of 
the first enciphering rectangle baing equal, (This reasoning la 
valid only whan baaed on tha premise that tha mOla loc ***J. , 
solely at tha beginning and sod of the plain tort, and the additional 
premise that the nmllf in ary column of tha seeond ***'•*&* #n 
from either tha beginning or the and ef 

either or bath of theee prwdaaa bean incorrect, it la eonc aiwabla 

that th. plMKMt «te* hw. -aw * V ehanc .. 

laplauslbla that, -O' ’ 

thaaa taro points would hare bean a a obs ~rv • . 

Still more ei«dfio«rt la a corollary to tha foregoing reasoning. 
The aforementioned foot that a constant nunber of eolnans mat ir*— 
no*, in tran^rlptl- trm tha flwt into tha -cent r*ctan*la, 


U1 


• °T 

•<*** •aottmr 
Vor* torlanr, V 
tb* dwpth of tin 


lMl _ 

tiMa th* width of t£. of *** 

- *** °M*t b« a - — QPd rao- 

«nd tho wid2 , * l a f%<rtBr 
Ltionli # 5 ?* °* *>• 


% * S £*L th* d^th of mu * t bo o — good roo- 

!o turning to tho olphor toxt ~m OOB *»n factor. 

raaoonihg, it bwea*, poaeibla to JI2? b ^ 1 <* tho pUZL 
iarolvod in tho do*)* tranino«?*f^ t,,1 * t * tho diS^I 
tt» "OondrmotmXL* IntLomUd^?'*'** * *«Pth of 15 4 * 
filled, and bod a width of 1L. Wm-^" f® 8 * 1# ° oomplotoly 
tho olphor toxt, it tho«f £ rJ2SL?\ 4 ^T»» batSUTSu, in 
oontoin n oolmno trm tho firlt^I^r 1 3 , x ^ °** 1*2, opaooo to 


would be tru. for*, mun^Zf Zlo"lwttori T n^w*? 8 tMt * 

/Ira t rectangle oould bo tran. ® otaw fTO * the 
either of ot&j 2 'f 00 " 4 ^tangle in 

the ft ret ZLpJSZa^)^ 

Crwuid^t^r^ 0 ?:, , ^ St *- it srsr 4 

wigie would cooproe tie# one full row and half of tho mi importing 
or prcccdiflfrow of tte »~ond rwtoagl.. Th^for.,^^, 
or the soocnd reetangl. would contain lwtUr. from th. m row of 
the od^amtmred oolusne, according to the firet tranapoeiUon key 
dnu itl.er letters Area the same roar of the even-numbered oolumn/tf 
the first rect&rsle. There would be 10 letters from column* of one 
class (5 f*» one rev and 5 ft*om • row Hi above or below the first 
row; and 5 letters f*om colunns of the other elaee (from a row 7 
above or t-elow the firet row). Finally, any tine 2 or more tcW 
j a cent numbers in the firet tranapoeiUon key were of the same elaee 





0 A 

t* 


U* 



aeib0d ftvm 
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tbct tha V*r* <* 
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to 


wa writ ton art In harlsontol 
the dolmans fro* tho seoond 
the numerical ardor of ool- 


^ tt*rrZn from tho flrot rectangle, tho nlddlo 

three, bol<w,^oln« mode up equally «f letters 


flrot root ancle i 
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«l«b bat littla troablo, the fare going eol 

-T-^romaod to tho foUving extent (tho upp 

tho flrot or loot 14 rtoro of tho ploia tosrtj 
£™Tblo«to «M> ««p-nt. of th. fir* • U* » 
rf plain taxi, ohllo **» ott»r talf li ewrlaoo). 
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D S 
0 L 


V 
l 

V 
Q 
T 
Q 
L 
B 
C 
X 
K 
E 
X 

c 


R 

X 

T 

Y 

B 

Y 
E 
A 
H 

Q 

L 

I 

l 

H 


J 

A 

B 

X 

V 
X 
If 

c 

L 

Y 
D 
Z 
E 
E 


UL1 
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111 
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X X 
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14 

It 
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Thn ©orrnct plain 
that thn lurt two rown of anil* 
thn misismi and thn aotnal 
of mmbe' 9 1 to 14. 


In thn prooodlnc ^Ufrm nauopt 
actually at thn bo^Lnnlnc of 
Icny van thn Tortioal noquonon 


p ••**•*• Wwat ih. 11 

** •*{, •*.-» ii • 1 ? u i n t n < y» i» io 4. 

y V40 ^ «*»"'»•» *«• to as I « o II • K t i 

,0* 1 1 t».«l a<l«ll VSl*ll% r.u Uw immrtl (non- 


•$**■&* <•* — '** 
<*<!♦ — 


‘ !L*At w »** 

(rt*l 
that 


W» UWral 
4*1 ta 

, . _ A - ..INS 

UW.-l • I ulv«lw\| r.u U« niimnr «1 (< 

0 i n %h* l<r *M*dal TUturnln* to 
«»*• iar»o«.ki.-» mm found to to torus, 

NaiWODNI l, •H«ln tto •. )u l v« Lott % 


**:•■ sstahllahsd tto 

.on* ton % and tto oooond 


a/ this [C »wd lff» i«i nthor 

. ( jM.v «*• flr * % «Mlfto«ln* kay m-_ .... „„ 

^rina **X *I"AF* U%«ral s.julvslsnt of too muotor 
** a* io*"* 1 ** * ,ul 1% **• io rood oil tto doublo troi 

lilcu , truffti iron*nl»%od ow tills air null. In tto piuosss 
If basfc traffic l% Ml found that tto first onoiptor— 

il., K#/ h*4 baan otongodi > tcooi or, otnos tto saoand litoral kay 
sitor* profidad In tto axUntol t motor, (t was warsly a rou- 
? lll# mattor to r moo vo tto aooond transposition and oolvo tto ra- 
oouiln.: Sli^Ao oolurnw tr ana position. 

Tin litoral ksy* which tod baan uaad for tto fir at anoiptor- 
ln . transposition wars, in ohronoiogloal on l or i sonDERSCH 
if B fiT&t (IA10E8ILL3GHAFT, and S C H A I F F N E It. 
Tlx, la t tor wna tto kay tnvolvod In tto two raaaaagaa originally aolrad, 
and froo tto taxt wan found to to tto nans of ona of tto oornraa- 
pondanta of thia olrouit. At about tto tiaa thaaa two roaaaai^a wnro 
sol rod, tto Argon tin* aid a of tto olrouit ohanjtad ita oonatant kay 
to tto oorroot fir at and loot nama of "N 0 0 R D", tto ootar nana for 
tto principal a *ant In Arnanklna. Thia nana waa nrrar raoovsrsd, 
although lta nunorloal aquiralant waa aaaily dataminad to boi 12 0 
6Jl»10 17211f$* Contributory otldonoo la tar aatabliahod that 
NiXHD waa tho agant known as OUSTAT UTZINQER, but tho awldanoa of this 
lc«y lndioatoa that hi a truo nano baa narar boon aaoortainad, a inco 
nana of Ilia known aliaaaa would produoo this nunarioal kay. During 
this final nrlod of tho doublo tranopooition trcffio tho Daman side 
of tto air lit rotainod 0 C H A I r P N I It u lta oonatant k^r* 


fYon tho forwgoinc onunoration, it nay bo aoon that tho conv- 
ploto solution of tto ay a ton vao conoldorably faoilltatod by tto 
original solution of tto firot nossago* 

It il r wslopod f In raiftlnir tho ronaindor of tto traffic, that, 
wtonorwr a 2 ooourrod in tto kov nuator In tto proanblo, it wus 

roprooontocTin tto litoral kay by ZWSI. Howorar, in tto originally 





0* 



Trumt rm*nmu» 
• 'xirnfMArta t. nA-mum •* 


th* 




drool"* 


* 7 *i*"**r* < * 

rr^ £**•* vTU £.TTIL^X!^ SW 14 " 

MHLVKtMB ** *— t* wxl all oUr^a «T «XW* ■ ^ ^ ^ 

St tfc* Kr^hlo f^JZJ wILT^m Wa rut f« 


- r a -* # and 1 

£ ffic* — 

£,**t 0r^y 

£**s? 


. •«^a«di 

appllM* 

At ths sod of kiatt, tte nsitAsh rmwm+m • — - ^ 

traffic on air cult 1*4) (IWbwi to Ttarlw), tm. 4 .-, u ___ , t 
tut tlM of ti* shan^a mA tm mmm « 

more oumcm • dsy, ao that tenths «p to ZTi* 

final comp lota solatia* «*s ofatslsad V w*vu< • *J?*7 



la. mo *feU\: •« vf us 


included a depth of tiuroo* (for AOl 
•ABC Schltia* sal* ■ in th* British 

S.I.S. Hand Ciphers* ) Haas of ths trains U4 to ut* selatli 

ns* aval labia to this offlss* La tar, ths British 
i* tails regarding ths ABO “ 
instructions ssnt to stsl 


«u, la fact, a 


Ths s/stoa usod 

pool ti on, as had 


The subatltoitl 

for ths aast frsqusnt letter* * usod Is a 
later, and ths transposition uss douUo 

key for each of ths too 

word, out todlfied in a *podflc 
show, liter, so th-t ths is* too keys for eth 



used on dtfforskt Jays of ths y*r, Ths snootltsti 
after the text was written Into ths first rotten*}* 
cool tl on, boforo belnc transposed lsto ths smc«4 



* uss ^pliod 
of ths 



MIm, a cipbar alphabet is derived toy 
himmKLBLaU, Without repeated 
nt lines by the raat of tha 


kS7)621o 
IIMELBAV 
CPMJXFO 
PQR9TTV1 
I X 

•t vertically according to tha nuaarioal 
mb tha key word. Thia alphabet is juxtapoeed 
alphabet talcing 1 out of ita nornal plaoe and 
it bs ta aa n V and S whan tha language used waa daman 
A waa raaorau and inaartad between v and W. Mow 
. — canaidaring variants, iat 

ilCDfORI JILNNOP^RSTUVfSXU 

ANVBKVSOSHCPTlDQZLJTMflUOX 


alphabet ana weed without ohaaga for tha first, fifth 
^ ninth lines of the firet encipher rectangle. For daman, the 
^hetitatioe for the frequent letters X and N would be varied on 
-y linaa ia the following way* far the second, sixth and 
tenth Unas S would be replaced oy U, X by R, N would be replaced 
nr I. am 0 by 7; on the third, seventh and eleventh lines, B ra- 
3aoad ^ 0, ! iv >» I ‘F D ^ ^ 08 tha fourth, eighth, 

g~i t welfth linaa B replaced by Z, l by &, N by Q, and ^ by I. 

The substitution alphabets could therefore be expressed aa 

follow* I 

APCDFlHIJXLMNOPgASPUVdISXYZ 


PUi m 

Ji often I 
II 
III 
rv 


4 N I B H E '1 S ri 


QPYIDvlZlJTil^ a U 0 X 
I I 1? Q U 101 

diyq 0 U R X 

JID! xuor 


It ls bel level frow a study of interro ation* ot Matured 
i vnt* that this is the -ay the operation eas actually performed 
v tht Jersaans, i»«.» *• one »t*p for aacn line, 

r aCt iy tne saws result* could be obtained oy considering tha 
ubstitutior process *» teu s* t *rate operation*, that is, i» th* 


** * 

it* 


„ f* M car r 

1 1 * i'rwr via. 


ESTt TSSZ 


’ZfTa. 


law i to flrot dlagna, «h« tto plain 

ia tto first, fifth aid ninth 
and tooth Hum, .ubeti toting B for X, 
ith and .lavanth line., 
tto f earth, eighth and twelfth 
I than to tto reeeltlnc tart 
toad on tto elptor alphabat 

would have tto following 
tto oaqpleto ■ub.titotia® by 


' sroi la tto third, 

* and viw ' 

1 Mb.tt.ta 

tto plain 


i ibcdfohwub jopijBsiuv»ixn 

; oi zb 

i l * I I 

b Ob zb 

Jpialrh 1 DCDlfOHWliujiop^njjpyiujj 

o*i * A 

£ « * * a 


Z 

X 


. j*V > ? 0Bad > *»« fourth Una. 


with Hr and 


to use oould bo trhrptad , 

aroduct# 

Iho transposition kuy 
an easily rnr—ti ml phr 
derived from trila In the 



4 ^ to the moot convenient 

Identical results obtained in the final 

XL letters in length and was usually 

word, Tto nunerioal key was 
— toy. For j sample, 

mjj 3 nai 25 n 62 niT 5 {? ? 

7 2 7 1 2 8 <>« 1*3 k« 5 6 »x|» 1003 

l*:us iiuuerical key *a a placed on croae-eectioo paper and 
the pxn t«xt wan written ant horizontally beneath, inthe usual wav 
e^oept tlkit all scares on the top line to the left of the coi 7 * 
w7ios« nueoer wan the sajie an the d* 4 y of enduhenaent i«rZT~ * 
•* *• Jde, text .uruci ia ttau aoo kM^t, 

un Dsosnfoer 18 (12A8), th* first dU^rs, 



^ ^ ltuu 


lit 


to applied, •• described above 

it *t »-»»!!*, uii 





, J^^ontoUj U«0. 

&^jr*rtzzr: 

havlt^ the eeeber °f 
tSTl. .t*rt-d t» th. Utt» 
voul d bei 

12 2 3 l 112 ^ ^ J 

t ♦ i oT 12 *fe*?iiafrjfrfr 


to the key 

— riaii fie. 1« 
aa the day of 
• left of the 
out, and the 
the result 


11222 1321 



IflOHlUfl 
KU 3 RSHI 0 
OlRHN4i 
I L i S Z J 

■ transcribing the columns tn key 
"* «* «S*--»«ne into ft™ l.ttor 

m*e*jtior to the foregoing procedure . This 
n>«« «•> ^ oumtImU? «r>»l th. ooivrnr 

•** thot «n«n tn. ■«•**“ ».• h. oloco out in U» ..oond 

lesicjrieted 0 / 09XX * 


Of this «y» 


, tin or* arsiy**^* 


&*&t<SS&>£f£rSZ~ -2-* 

3^S$S!!^* would nevertheless proouoa a diffwah J»ir ^ 


4 i** ‘f^i-^f^esoh dayi ani tto * o°* bin “ t - ion oX ** yl * nf * t *" th 
>^*ijrSi^h5S-ti--«^ °onsti toting a -ultipl. of both 

- mld *" 930 1 * tWr *‘ 

-U- uaa Of variants for tha act common letters in ths 
,!2 usort was, of coarc, to suppress ths outstanding 

of thsss lattars and prevent or daisy tha identifi- 
fI ?}T a f tt» iMnmvft* employed. By adding tha alanant of complete 
C *^titution with variants to a difficult form of double trans- 

there we pro duoed. oryptanslytioally speaking, a really 
S »ystoa. Although the iadividel alanant. arw ai-pl. 

fZOllimr prooassas, they ware hare combined and 
l£ t appeared to be a truly fermideble system and one for vhioh 
JJjtj UT if poasihla at all, mould require a Urge voluma of 

traffic* 

The use of variants for frequent lattars (or camouflage) 
nrovjd to ha no *r«at ohataola to s elution of tha substitution 
2phaoet, and in sons oases proved to be an aid to solution 
of ths transposition, furthermore, within tha . a par is nos of this 
office, it rmver delayed greatly tha determination of the language 
As mill be aaen in tha explanation of tha mathud of solu- 
tion’ ry key weights. it provided the only method of solution 
that even approached a general solution, (necessitating, however, 
tns use of only massages shied involved completely filled second 

encipher rectangles# ) ^ 

Tha nM lor weakness of tha ABC dchlue-aal waa tna fact tnat 
i * i , j 0 f . message would enable the reading of 

Si z »- Phr.«. Th. 

aU trafric enc . D/ira5 a varied from three to si* months# 

period of * ^ cryptanalyst was that once the renaral 

usis: rrfS-~~ ss-ss. «• ■* »-«*. * « 

a * Ul1 °f * ,., 0 . „ r , tnovr. mt fact tnut no column 

Tth. -oJ* cnclrhcr diu^rum -a th. nu»b.r 




at «M the MM, afford#*, 

favorable for application of ta# 

* soch a om> la trout ad la a 2 (3 )• 
familiar apfroactea to the problem 
~<~mraing of two or acre aossagoo 
•• of »«riba* froa aeaeagea 
the ovdseion of ocm of tho 
• dally and paina taking 
circuit* ma pars***, searching 
onod above, m Mil 
by the aathod of 


'ctber'clrtMlt ■ or 
%Lot the prooeea, eta. 

# *f£tiar of traffic on all 

ffTeridenoe of aiy of the 

r for acreage* of awh length* 

Elution hr »»/ Might*. 

It ahrald be aentloned that a otmac* to a dlffa 

nhrae* *■* a— a ll y ordered by the o octroi ataUon la the final 
aiMg* Mat in the our rent hey, for example, «* 0 m Key Huabor !•, 

•Ua# *•/ *o"b#r 3"» or lln like, in fhat, it ana thla practice 
of signaling ohanpea of aeya or ayataaa la the errant oryptographlo 
aye tea *tioh gar* tha fir at ln tla a tl an of an »ABC Sohluaaaal* 
gad a«pplio<* tb* information Mich reenlted in the a olotion of 
traffic on oan particular elrouit. 9a# 0 2 (2). 

2, SOLUTION i ABC SWLUKSSH. 

«. MCUK8TBUCTI0N Of T*| SUBBTITUTICN ALPHABH 

The fl rat atop la tho solution of tho traffic of any circuit 
using tha ABC Schlttf ssel aaa tho reconstruction of the aubatitution 
tl/hibat* The Mthod used to accoapliah tnis aaa fairly unifarn 
and hence will he described in general, aa it would vary only 
slightly far any of the iadiv-dual circuits solved. 


As previously noted, the camouflage of frequent letters was 
not a serious impediment to identification of the language or 
recovery of the substitution alphabet. It aaa found that about 
1,000 letters of cipher text was usually sufficient to accoapliah 
these results. The foliar mg comparative frequency tables baaed 
on four different samples, tao of plain text, without camouflage, 
and two with camouflage, tbam that except for the letters involved 
in the camouflage, the frequencies correspond wall enough to 
identify the l a n gua g e and s e r ve as a basis for watching cipher 
letters against the plain text letters. 


85— 


1 £ 
* 2 

0 

0 


H 


yL 

t 

$ 

66 


3 K 

K U 
L Jj 
U 2 $ 
U 91 
0 29 
? 10 
Q 1 
a 7X 
96 


T 

V 

7 

f 

I 

r 

z 
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10 

17 

93 

1 


93 

22 

26 

n 

60 

26 

8 

I 

20 

£ 

37 

23 


u« 


U 6 
U 8 
16 
a 

s 

a 


131 

12 

u 

36 

127 

10 

18 

10 

99 

6 

2 . 

s 


Y 

60 

72 

to 

to 

12 

1 

66 

10 

iZ#B 


It is clear that « should be able to r s co e» the substitution 
alphabet in aost cases, by Judiciously fitting tbs observed relative 
frequencies of the cipher text letters to the distribution of 
the relative frequencies obtained >om previously deciphered plain 
text, adjusted for the camouflage eleoest, and rearranged la the 
order required by the language Involved for the plain cov en a n t, 
keeping in "ind the alphabetical considerations inpoeed by the tay 
eoru raethod of deriving the cipher component* By relative fTe t uenc.es 
we n frequency count adjusted to the basis of 1,000* 


Far tie purpose of clarifying the process of fitting a d:)nar 
con orient r ich had been derived by the keyed coluonar aetnod to 


\ K *• *» < V, 

** f I P Q f 1 
* Ik 


It i* 
ita* 1 * 


t fast tha dLffi 


that 



!!it i mtIm of lattara la alpfcabotiaal ardar ia apaaad at 
JfSm la «hish ara naif am or wry by Mly cna, and at tha 
^ tia* «i gat aaah onif oraly apaaad aarla 
or* ctioaUr all ®f tl» mr lat t a ra , than l 
of tba laaa fruj aar t lattara ao that tiny pi 
tha lattara of tha flrat llaa shahid fora a 
aitboot rapatittaoa of lattara* Meat of tha 
aolwad far thla 

ita ttadu 

solatia© of am of tha — hatltollin alphabota, ana aaod fay 
[j-Jil. if tar traffic had ■■— alitsil to tha ash 

1 200 lattara, Araquooogr ooa nta onto aada an all 

totalad aad tha ralativ* ft m ynn alaa ee^pntad, nLth tha 

roaaltai 

UCS^rOIZ JKLMI0PQ1IIMV 
1 11 
12365*35 1333015 01915* 

6362093568732926*275032 


JfcarjuanflT 


XI Z 

2 2 7 

3 3 6 


iBCDSJOHI JXlUOPQISTUTfm 
Solatia* 1 

Tre ,-ncy 1125**0* 17323 * 317 *3126 

399010855511639533*733*932 


Sinoe 0-*l nua a Spanish atrmit, tha lan^oaga uaod vaa 
asouaod to ba S ar.iah* Tha plain ocnponant ma acoordingly 
arranged far Spanish alth tha 1 batnaan T and I, aad with tha 
previously oorput^d rolativa frequencies for cuaonfla^ad Spanlah 




Wf 

•mnfuiiiHiiiiiilHK 

"*• "**» •• w •It'fc* . juImU.1. h| 


• u» 

um nm 



Thl« arrmaemmnt tadloatad a hap ward of XO lcitara, with 
•lx >-iatt r and four 2-lattar aol—na. Maw an atUui wta 
uuKto to plaoa 0 f f. ¥, X, T and Z, in conjunction *th tha lattara 
alraacfcr plaaad* Sinoa thaaa wara rara lattai-a, it waa uauMd 
that tha/ wara not wood la tha k*? word and tlwrafora thara wild 
ba no ttora than ana of thaaa la t tar a In aaoh oolurat, and that thay 
«Mld alwa/a ooour at tha and of tlu Loaf aatkian. 





ITVXTB 



flat* 

Ctiplmr 

run fi 


a o o 

bin 

|j K 

1 ■ 

I0F 

Dll 

f u 

V A V 

XT * 


3 kk 3 3 


3 t 

7 7 f 

17 6 

k b 

15) 

7 3 


1 7 3 1 s 

f 3 

7k 

*73 

117 

1 1 

3 0 k 

30 b 

ill 

iC F F J S 

z a 

a L 

SOX 

OKU 

D ▼ 

SHI 

!BV 

iky 

It k k i i 


* 3 

8 11 

7 8 

3k 

lk* 

7 1 

y tk 

9 5(0 3 t| 


6 1 

8 09 
$ 

3 13 

0 t 

b 3 3 

7 9 8 


lb 

1081693731b 
TlilSFONCZ 
• Dsoimrt) 
V VII IS 


IlM ward TS4MV0B£!ACXQI 1* rtadilor appannt* Th» illustration 
lixMi aoai of ib •tips sad obviouily Inaonrut attapb. 
dill n*l*tlm ftiquailM bM#d OQ i Mfi iwtlrant oba#r*atio«i 
c fwvix i pi ui.a lanpup! togitinr «ith a traate toI\W of 

uut fMtjuaAqr, fmUr pradaion night ham bam attain*! 



(it) Solatia trmm a root pAor of t it quo froo okdUh 
oat stop aa omitted* Circuit W, Berlin Mutrld. 

(5) flolotlai Ip kap al|Mo« 


o (i) acumen b cam or a ocmputs era. 

JIROTT Ml, HAMB0B0-871IX 

In Auguat of 19tt3« tarofflo appa»rad on a circuit lctav 
found to to bo t—o a ff— Imrt and on unkno w n plaoa la Spain, 
fcraffic *mm oDottr of laaipolflcAat voluao. Fop a period 
of tujo in lAA oolj caIXb an hoard and It Waj thought poaoibla 
ttut tho lrcult aj land* Hoaar, aaea«gae bacon to opp aor again, 
but the total mabcr throughout the Ufa of thla circuit unontad 
t onl/ 36 arneta. StatiaUaul taata tnoaod that ths ayvtaa 
o^logrod « e orobobl/ o c o a bin a ri ouboti button tr«napoaitlon aetha.* 


^^ 0 % circuit wi - f‘ a «»“ 

trmnc position -thod «d «•“ 




r!lff<na wNtitillon — 
'^■TfMiM of this a»wunption. 


^ n<nlff , ^ MUniMd to bo Spool ah end the substitution 

A** bar t*»o sethod described heretofore. 

s srru*^«niis:i^: f s o .u.u.» 

** "fh^V ranapool t ion hey. Fimlly, on 13 April, 1945 tho H * m J'“ pg 
^l fc trJn»Sttod • 00000(0 ooor oil olroulto which oooood to 
^"‘ffpl^difforont vorolono of tho mm plain text. ' «*• 

** rii T itd ohon fir* versions of this * 0000(0 ooro rood on circuits 
°^^a*nb*y word*. Thooo five vorolono varied only in accordance 
“JftS language wed and tho individual oorlol nunboro contained 
ooooozo. Tho oaooor ototion of tho 0-41 oircmit received 
,-a-. of 2>5 letters, tho oo*o length oo tho version of thio 
Lssogo tromoittod to tho 4-41 out ototion which wo* being rood 
and *«« uoing Spanish as plain language. Tho sixth group of tho 
Umhl nea sages had already boon identified os tho date indicator 
'rouo and tho Jc*y for tho enciphornont of tho aato and boon worked 
out. The hoy was* 

11223456759000 

MilZOBSICHTHV 

In tho ses sago aontioned above the sixth group was Q rt T F £, 
which gave 1? a* the aato of encipherment (tho first throe letters 
of this Troup wore always nails). 


The frequency distribution of the camouflagsd plain 
language of the 4-41 version of the oossage sent to all out 
stations was cooparod with that of tne cipher text of tne U-4l 
a essaje, thusi 


A 

B 

C 

D 

S 

F 

a 

H 

I 

J 

K 

L 

M 

N 

0 

P 

Q . 

R 

3 

T 

a 

T 

V 

X 

I 
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TOP SECRET 


A_JLI U-hl 


9 

3 

k 

11 

9 

9 

9 

11 

10 

11 

11 

16 

10 

11 

d 

6 
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8 

7 

x l 
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17 

4 

22 
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27 
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9 

20 

3 

26 

16 

11 

9 

10 

9 

3 

3 

3 

2 

16 

3 

6 

21 


55 ? $ 



The new substitution Alphabet for U-4*l (whloh had been lntro~ 
duoed shortly before) was recovered, tgr .Hatching the U-4jl cipher 
text frequency shown above with those of the camouflaged plain 
language frequencies of the b»42 version of the meeaage, aooording 
to the method previously described thusi 


Plain BCDEFOHIJKLUNOPQRSTUVAWXXX 
111 1 12 22111 1 
h 9 9 0 10583 7972070610693662 


Cipher A T 

C Q 

E D V 
1 1 

F M 
1 

I L 

N K « 
1 2 

0 JT 
2 

H B U 
2 1 

R 0 «|> H Xl 

3 9 

9 9 

2 13 

6 U 

8 

8 7 2 

7 3 1 

7 1 9 

3 1 2|6 6 




-rue ksy "° rd used was PERSONIFI C A C I 0 M. Cm 
text at thm D-iO. message was then concerted by this alpha- 
to plain text except that the onaouflage could not be r wears d 
£?__ the frequent letters, this can ouflage , however, did not 
oonetitnte any Wath-snoe in the solution of the transposition key. 

The Spanish message of 255 letters whicn had been read on 
circuit h-AXf •• it appeared in the first enciphering rectangle 
j. sheen below in Figure 22 1 


Ulllllll 


jHDHEIIOSyUIII 
ZHIESEETICIOD 
/TOSINCOmciOXFU 
JJDOIESPZRAHIDETA 
ISSIVCOKOIIICA 
|SUSL' ENSAJE3ACI 
gp. IX^nXITHESI 
|j W F I fi M A C I 0 I I Q b[ 


T 

E 


C 

E 

3 


R R 
A N 
0 
L 
N 
S 
0 


1222222222233 

KPIRIEXPORA 
01EP9RL0PR0 


SEQUIRTRABA 
AMADAXSXQUE 
U3DENUSTEDE 
QSZXQSZXHOR 
2 B L E D A RIKOS 



Wow, according to our theory, t:ds same message, with a 
different serial mwher at the beginning and possiblv chewed 
vexy slightly in other P*rticalar5r^ut^ 
text of the message sent over the U-4l circuit. 


The cipher text of this message as transmitted wast 


Mr JR U is £2 

BT 



rppzr 

KDgOS 

S7SUW 

gogzi 

DrTPT 

OJCTZ* 

TKBJD 

asm: 

tossq 

PTTSJ 

TTSGJ 

FSJPTZ 

ZSCiJ 

KBHCI 

SGBYP 

I VLB 

FKF1X 

i£SVH 

ZCFTC 

JXARD 

U 

KXH7P 

ZSCZIf 

utzof 

TFZZM 

D 

FWO 


DHEJZ 

LXUSJ 

Z^PJB 

YJGPT 

_DVT0 

OffSS 

atrj’ 

EIILBK 

FDGX 


tzpkk 


TOP SECRFi UL1 .. 

J U DT ff ZVRK AECBK 


EBOOK OPEDT 


ZPTXZ 


2ZLS am 


Ham, m them tUi 
*ub«tltutloo alphabet 


mrqp 


•dpfcir text 


booxq 


DCISX 


DIBIT 


DOQtl trnfl| 
L 

GTFAT OBB ) 



IifTJF 

SnLT.S’S* 

snelptem.at.Moh ** bl#d»d«toX th. Moid 

enci:,f^ r~U»*U i, t> U .yrt., Th. XoBg „„ Jg* «d«, 
* ^rhitri'jrlljr iummed to alternate through this disarm, as 
tils a mng ms Bt *>uld distribute the rariation fro. 
sloe rjore or less ersnljr through sll coluims, Wtt# 



Joluoa 16 
Figure 22 
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w 

IF* 

■ to 

■ !» 0 

8*0 
s X F 

J T T I o 


/u J i f *** coI*« U of Figure 22 

*- ss r " 

£^ < 3rl& g» < ssajs55? S. * 


all 


221 * 

p lW**»* 

|I O 1> I * ®l^ 

0 II 20 * 

xm®* 

MVlDff tf|S 


ll 


QMT^OO 


of Fl*ur« 



Thi* 


zy 


22 21 *3 

n« 97 ^ii 09 ftl 60 k 
IsTOFBCOsIsTOIA 

MJ X o A A V «* *»|V V - 1 • J 

L « o|£ o o s c s a a|i r a a i o 8 x|y o o a i u q h[b f i| 

TiuxHx|sB»oi»ao(riooiozi.|»ai.T_s®zal 
£ a a b o » o ofS o a ■ r o x x c|o a p o » f a h|b o a x ll 
,o x a |i p o a 1 1 1 ^ 8 « d x o . 1 1 4 * « d a i d a si f ° 

^ A d 0 E *f» “ 8 0 3 5 H , |® ,!S 0 8 A 0 ^ I I* a * a 1 S X 0 
1 1 a o o x o|e'? j r » s a i|di i o s m x x|s p l h m 
s b/f's o*«hq^i*c c a b > i i o o i c c s ifij 

:iVA 00 pfrLMJDSTC 


HOURS 2 h. 


thu?! ncQMtrviMd) W 

iritrt th. mmeed • ncl ^ d ^!f^_ tal t«xt *»ich hod *!*•** 
r^slmed t»Utoorttl« * orl '* or *“ of th* **T 

w#n divided into colw«nl-os 23 (■««— 

fro* th* *rra»g*v*«k of th* coi«mr» «» rirot 

top of Vi ear* 2k) •*» writ* it Into *31 «* ^ tH* 

SLriUtangl* vertically. Th* only colvmn not pl*«w ^ 
*” y C £. No. 13, -hioh had boon omitte d from ■* - to* 

Tuim wa* vary m*/ to pl*o* so a* to prodae* emil lMrmop^-^ 
ccwplotoly raoooatnistod firrt aueipbar roetangla °f }J* 
aTs.jp*, »lth th* canon flag* not y*t removed, i* *n<wn bolcw. 


onlf 


1 1 1 J J 

o ? 2112 


2212 1 22 21 23 
0 $ !)' 7 5 3 n 6 6 ? 7 3 U 0 9 


_ 


“HTT 


XTHIS3ZI 

FIITM 



ITF TFNDRFKOJJU 
0i j|lJ(flKT3SaRTIC 
lu f H J M T 0 3 I RCOITIC 
A3aJAWDuY£3PERa 
|I ^ U F H I 3 S I I C 0 II V I 
3 D G S S II 3 3 011 S U 3 3 
IX E 0 R Y I^niyUITH 
IE UOSCONF IRMACIOR 


Tho actual starting point of trie i-umerical h»y could on 
partially 1 ini tod by planing on t he correct lino tho letters 
involved in the camouflage. ?nue it can bo soon that the 
first letter at tho top of col an. 19 roust have noon on too 
second line and tho seeorid latter cf column 6 must also nave -men 
on the second lino of the first encipher roctanvls. Therefore, 
the end of the key must have been either oumber'6, 11, or 16 . 

At rhis point, reconstruction of the literal hey eaa the 
one final step necessary to complete the solution, and to 
pro.iue the means ** or reading all the traffic on this circuit in 
-his key. The literal say was soon recovered! 


A J H 4 y P £ J u DC 1 4 ^ 
JJJ 3 2 2 2 12 1 2 
0 9 2 112 7 0 5 5 . >323 


? U h A 4 

2 1 2 

7 3 4 


J 

2 

3 0 9 


i-JthOSBHAC 
3 12 2 11 

096160440 


rnM m muNS * A HJtWb UfUB * 

a< * ,# £1" HA-WI W-** 00 rtl 19lo> and 

™» "S&IS “ r ' ^TSTt-rtry-j*;. i£ 

, b* •■P 1 °y^ n * *. _ zz"_ *n- < hilv. 19 U 3 » tn»rm 


•S'*; 3»iS - J«— « 5ai! lST, th.r. 

/«*»* h JlrTE«d»£» *■ °* m “* 5 ^ y ' 

toUomU* tmmmmgm tram *i*o. 

•X AB MOtt }*W x S’SGHS X SIS BAN X 
MOINNEN KIT X ABC X SCHLUS3SSL 
IfND IOWAN HUFZKICHSN ARBITTIN 
BiiSTAJfT IOIKIO* 

Tram la tad, tho instruction raadl 
" Affective morning July A, bagln with 
ABC kay and raw call signs. Hequeet 


acknowledgement." 

2ha first Hswburg message shied could not bo rood by tho old 
system, ass a 60 lattor message tranawlttod on tho seventh of July* 
and ancipharod on tho sixth. This was osouaod to bo tho acknowl- 
edgement requested by Vigo. Tho dots indicator sppoorod in tho 7th 
group sni ass the sons as used in tho previous system. Tho cipher 
text of this swsss go ass aont so follows* 

NR 47 *13 

F0XRM JAHFH 03UMTJ 4lU*G VAJVS 
33ALV LKSDOV-i^P/ PJTECl DHj'^3 
J#Va* AQ3H9 M3VMV 


4t 

date irdioator group 

hven ai th tne practical certainty that hmro was at least a 
i'&rtial crib, no progress oi any significance toward solution was 
achieved lor a ler»g time. 

foe eolut’ - ?f t im substitution elements in use on trds cir. 
ruit ,.,s not a particularly difficult -natter. Tests oroved the 
Jareua * myloyed after tho cringe in system *as ioanish. rot 
+'***• % notching expected plain text freq.*nct‘ s to cipher 


V- y, , 


t#* 1 


w*e 


frequencies in ths mmmr da*^ , 

- »*~d t”' 1 ™ 1 !'" 

1 1A — _ 


V — - — » 

derived 




3 10 
£ X 
B D 

£ U 


7 
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V 
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2 

C 

o 

w 
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H 
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A 
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Z 


u 

z 
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O 
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M 
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1 J M £ 3 . Thuai 


8 

a 
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It <riil be remsu bered that i* 3 , 

P °* lti f n * n i pL,lc * d bet^n ¥ «T?? a I !!** 1 fTO » normal 
Com binlna the caaouTlage element with •°* i Peering alphabets, 

from the .bore to x word, four alerts 

in saccee.lv. lines of text. Tiuai * ” developed to be used 


Plain i 
Ciphers 


Inoipheriog 

BC0IK01I aiHOHutJU,!,, 

II A J 2 C 3 J J 1 * 1 1 - M ° 4 ^ V S ^ r H Y X D U 

III IOCS IHXO 

IV £ 3 » C X < H D 

D/U 

xn .pit. of th. ft., ZieTlSS^-S: 

messages appeared to be Spanish, itia. decided 

table of tax* lessee that it mis uSZtvlZ. frequency 

. f Jt , ***** . b0 f" observ *< J i« previous damburg circuits that the 
interna- serial WMbere ueually continued despite a.iy change of 
system. In circuit u-R the usual procedure «as to olace tne in- 
ternal serial nuaoer at tne be*i*»Ug of tne aesM^. ™ 
pot>siole t therefore, to aaxe a strong assumption as to part of 
the plain text content of the message L* question, i.e., tnat it 
started irttn eitner h it l Z * 0 1 SUBEU or * th £ * o « 
X £- R t N 1 ana tnat B i n f 4 e) T I i i M »- B the next word. 


delue is a distriouti^n of the cipher t^xt of the 

a? *> t i c n. 


! stage in 


a ..th -I, - = At. 

A r. * y z e ■ 7 I J » L . r , - o r J 7 „ 1 


f?jDsf?ir?jKL*?n?4?fTTJv*XTi 

The fact that ttxa massage warn 60 letters in lsn gth precluded any 
fourth alpha hat substitution since a nwssapr has to bs aore than 
63 letter a (1/31/31) before it oan reach tha fourth lins of 
the diagram. Tbs interchangeable lsttars than ars I, F, 0 and A, 

W, l. Tha absonca of I' a suggested a aintena of first alpha bat 
substitution and tha raf ora it was da due ad that tha starting point 
was at tha extreme right side of tha rectangle. This sas confirmed 
by the large number of 0's (B in the third alphabet). A possible 
start *as made as folloesi 

N R X S 

I5BENEJMSX9BSTABTIQSN 

Th V?* l l P and tH * 04 •“**••*•<» SfliUCH and sines 71 was the 

aTthl eL ZTi"?: 8 ?** gyg NIt 1 in X assumed 

at the end. This left two unused 3»a, tnd finally BJSTKISBddPHUUH 

was guessed m. This .as the procedure until the oumpletT plain 
text and its exact placement was reconstructed as follow^ 


Z # ii S f E d i X r ! S T 4 ? t X J g (, j y H g n , J J * 

e’ssrKucsnuTjBmTnnn “ 1 

At this point it is «ell to emphasize that the exact reoon- 

0 ** * ta<Cin - procsss of trial and error that 

st tched oier a p* rloa 01 months. For recovery eg* the key tn 

be possible, not only exact text mas necessary ,* out also exact 
order and punctuation sas required. 

Recovery o.' tn. lay proceed „ roll*,, U t, «olm,rtne 
di the H‘Ove pi am text aceorctm-: to the ,uo,*lfiUon “ 

al yhd ■ets f, -a, anri III on successive ljuest 










rt N i only oossibl to aooept or reject asaumptiono of tor put- 
t or 5 numbers together, looking for confirmation as 
<- ini built up. If the reasoning wan valid, all exoept pom- 
*fhfv one rvrtieal lino of rectangle k :ould bo found on tho aaoo 
11”* of rectangle although tho lottnro would not 

fhia !?**• • preliminary confirmation of tho cor roctnosa >t 

reotangl* A# 

Actual solution wont forward in too following manner* 09, 

* oidumn out of diagram A, could bo formed only from column I and 
IP of P, since there was ordy one 0 and w on tho same noriiontal 
; • r ' f B. Thoroforw 7-12 mas an adjacent pair in tte key. 



B k 


Since Ha mas not a vertical column in A, it aust represent tne 
bott>>i of one oolumn and tn*» top or* another, ’mlesa of course k 
was « short column* 


7 12 

I 0 V | 

B A I 


fne only possibilities for tne bottom of un A oolumr sere 
r a;jj Therefor- ^-1 2 t m ''ollowea o v - any colux-i in B tn*t 

ria at its bottom letter r or it i.e., 19, 23, or 27. 


xi 1 

V / K df 

a * / | 


7 12 23 

I 0 V l X 

3) 


*s 

M' 


7 U ?7 
|0 V| A f-! 
^ \ % 1 \ 


10 

ji 


i 


I 


, reprint tM only possible column botLoma that 

ST- tha three elements of toy. 9y * process of try 
ri fusibilities » right case ns eventually reached. 

» all pew 5 


inf 


7 12 27 1 

o v | a r | 

ala 


I Bli 


building process continued. It beoene progressively easier 
A " 1 ,• the columns left to select frees were reduced in number, 
the entire key end the key phrase were recovered. 


F it i N 
1 2 * 
2 7 lb 


r. 0 L L E a A 

2 11 1 

o 6 7 b 9 U 2 


TR I U 
2 2 13 
9 3 6 1 


K>’ 4 L r m U m A (U 
21 121231 2 2 1 

133920301U350657 




*n). auLurfou >w <:u\* auaac mm nunnP»*UTI0ll 

KtYti ARE THE bAlC. 

U-X HiUmUNO-LIEIMI 

On 1 Saptanbar, 19UU, olrouit J»-I pat into arrant a ah»n«a 
ln tr*n*P°* itlon Htoh w+m inatitutad, whlla »r«frU 

M jo u*ul«tad, ^ ar • 0MB# *" or "rtiloh aulitilon "»Lght bn poaalbla. On 
ptcmm bar 12th tha Lisbon lUtlon aant tm> *aan» nunh of whloh 

W Hi z$0 lattnra in nlngth. Mot ongr 'lid thla provlda a hmm <*f 
t r*ffin in dapth, but. it alao provliad that apaatal aaaa ahornln 
both tnMjWE tl on raotanglaa a r* tha aaaa airftti . Tha Mil Inter- 
acting of aJ 1 tha faotora in thla particular anlutiun, fur in* r- 
HO T9, tha uaa of naaouflaga latter* to ft* paattlnna of ool- 

umn^. 

It Wu» atutad aarllar that tha Oarwana hopad, by aaana of 
oamouflaL'* of hlg/wfra^uanoy lattara, to obatnwt idantl flnatl on 
of thr lun£ua/*a uaad. It has alnaa<fy haan danonatratad that oua> 

ouil^ga did not dal*y tha datarntr»tlon of tha lang\«aga a partla- 

ularl/ M-rlklnt; oirounatanoa bain..; that of oirautt U-tt, anloh ohan^ad 
from frrmttn to S^MinUh alwiltanaoualy with tha ohanro rrum 
"Janoa&kl" to ARC Sonluaoaal (3aa so] nil on). But aoraovar, in 
tnt- olrouit undar dluouaalon hara, oaanufla^ aua an actual aid 
to solution. 

I'ha substitution alphabet for thla pari od on otrsutt. l*-x 
«aa ha sad on tha k ay a-wd ¥ o H f H I L D I) N Cl. 


iincl .^»ari n j 


'vrj n d 
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I J 
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0 

if 
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T J V 
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t X Y 
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1 ■< J 
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f a 41 

) V 
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l 

ri t Y 

T 
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T f 
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0 
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M o 
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IJ i If 
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ft 
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i i ‘J 
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ft* m 

, <*»> 

-/itJVDB 

c Z 0 

„(<>*« " le ’* 
JV TUCO" 

; 0J3 , ..*«« 
0 a f X N 0X803 

ClHRX our Id 

MwZZ y Z3Q10 
2S3BB RliHCM 
F Q Y Q 8 W D X Z Z 
DNUP C1FKBQ 
X H X Z H 

NR 23 OR 51 
HUBS 4 B 2 B C 
TUNBZ nzr^c 

9 * 0 SI D sk: zo 
5 y 0 * P ^KHC 
£ B C H Y OB C U 8 
V 0 R K Z 4222=5 
F % *; 4 z B p BI I 
p Z <N 4 S N & P 
n CD M P *, B 
/• L t ri ^ .4 A 4 0 



r» T * P * 

B M Q ® T 

0 8 M I Z 

IX H * 0 

F X 9 V Q 

|OH> 

Q C C I L 

z z n A C 

CCQFP 

z R U 0 R 

zmz 

U Z U C B 

UAK8S 

iZI QU 

UBHQ 

OQOUI 

4 F K U K 

SIB JK 


OPZS 

P 

, * 
o 

5 

A 

J H 

4 C K J 

4 

z 

B 

P 

S 4 

3 5 3 0 

8 

2 

T 

U 

3 Z 

P 3 J 4 

A 

3 

R 

P 

D X 

I0]P 

K 

3 

N 

4 

4 X 

3 4 M Z 

B 

A 

0 

C 

3 4 

A 4 U C 

T 

r 

? 

a 

Z K 

5 - < X 

4 

4 

2 

% 

n 'j 

U Z 2 « 

U 

R 

- 


j X 

u f 2 2 

«* 

4 

% 

% 

5 4 


ix • • a 
f D*» J* 
goto* 
OTIB* 
Qlf>® 
Z Q C u H 
TMHCI) 
0 C H U * 
IOTIB 
B fl M J« 


4 I 3 2 H 

C V X Cl I* 

3 D Z 1 4 

1) D C £ 5 

QZU U 
ZHZU 

« n y r z 

P Z Z U 0 

E D ei 4 Z 

* 4 «: 4 q 


1 CP btvsu, 

- Trr: 


I 


8 8 


x t » 4 


5 6 7 8 9 


Jiiii.iiSiS********* 01 


Hit 


b 0 


Ed s* 


i v 


J884567 


1 1 

8901884 


suit!**;;;} 

56789018845678 ®®* 


ITopTt i 


0PAUISEI3TPAZUTTUXIDDABUR 
hlezacacabctzzfiorzxatoiooxoia 
zbirdpqxzocqpxxxazzfxpctjwufbzx 

FEOZULUIZZRUITBXEXIHXHZSTPHOZN 

• (jaARERminZOUAXAROOLDIXmiP* 
UKXLAXWIKTUBOIXOLAWHTSXCMU t? Af 

dpoblinnrduaazxyeakfpexpqc HOT 
R I X E Q I A Q T CO HRARPLFIQ gYBCnZOXIt 

Lxi teJ 


After conversion of the cipher text Into 
from the epplicetlon of elphebet I, attempts 
transposition key. Sees effort was e xpen de d In 
aing, but due to the length the only tangible 
the probable beginning. As the external nurih 
froa the pattern of sessige texts read previous to 
it was logical to expect *FTS X SINS* 
lbs only suitable arrangement vast 



solve the 
t enagr— 
in isolating 



C A R V A 

FTSXEIMX 


But no such cover nane had appeared In previous traffic so this ap- 
proach was not pursued further. 




However, because of the fact that when the day has the sane 
nunerical v ue as the month no column is eliminated, in the second 






and rr) «ltt all «tl 



* l o r ft full •xpoftltioo of this ««thod and tarwlnolof y t aaa tha 
Sacra* puHloatlon of tha »«r Plan* and Training D1 rial on. 

Si 71&I Intalllf#ncft 'action, entitled "lenaral Solution of 
tha L*ouVlft Tranapoaltlon Ciohor," Tha following iaacription 
i» lft»od on tha ftaau^otl jn that tha raadar la f^iliar with 
t'lla *"athod # 



Cipher 
Plain l.. 1 1 



*7 Conti n— d 



ot 

Cipher 

FXaln 




r rnrm 




far «*• 10041 

p«*‘ M 

itt'wi af th* 
tttJesf 
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lose 1 

1/ MM* 


n 

*9 

90 
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ft 

99 
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r* 

" O 

Cl 

1 

\9 

6 J 

*4 

199 

II* 
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Cl 
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A 

9 
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0 
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G 
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0 

n 

1 

11 

% 

90 

n 

72 

»r 

91 

*4 

95 

yb 

01 

1 

32 


m* 

125 

156 

4f7 

02 

A 

9 

f 

0 

0 

1 
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C 

C 

11 

X 

ft 

a 


y. rt 


a 

« 

ri 


i 
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I 

</ 


0 
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jtt* idfnlfioant ® ^ M ^* n f* '*14 wt h'lp h»f • f** **• 

rt*v* r«plM«^ *lth*r looatlon J? or 4) of 0 o » b*»th P*'*’ *'** 

fourth alphabet position*. All •olwna *»or« ».hor. trio 4 In »»* 
position folloirlnc 12. for oKawplo, » toot of toluon 2 (pLoln) 

In tbs lJJth plaoo (olphor) Lhuai 


Co 

Cl 

C2 


ye 

2 

D 

H 


yy ioo id io« 103 i<* 10$ 106 

n 6k 9f 126 iy/ 1*6 219 250 
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0 
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(4 

<4 


u 
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II 
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Z 

N 


This w<» an unqualified rojeotlon, beoauae tho double 14 «m o«r- 
tmlnly a fourth alpha not aubeti tution, whoroaa tho above aotup placed 
It In location 95 of C 0 , ohioh «aa a third alphabot subaUtutlan. 
Similar toata were aad m of all a alumna although of nourao In avery 
oaaa tha roault oaa 5/ no aoana aa doflnlU aa in tho owviiplo riven, 
Tho lata thua obUlnod oaa oooparod olth km/ oolffht aomroa for ool- 
unn 12, Column d appaarod moot favorable, ao further experiment- 
ation oaa *iv#n to It flrat. It praood lator to bo tho e or root onoi 
but hod it not boon, tho aaao prooodujpo would have boon triad with 
oach of tho saveral other favorable oolumne. 


Tho general solution aotup olth tho assumption of tho boy 12-6 
it mown in Fitfura 27. By tho operation of tho too oolumna thua 
locatod, tho t/'4 pair of oolunn H oaf thrown to plain tout position 
219. Fortunatoly ti.ia oaa a unique pair, probably requirlr* a C/ 
vowol pair to prooada it in ord or to taka good tout (tho boir^ 
actuail / a fourth alphabot •«•). Since position 216 oaa already 
dot«r-alnad aa replacing # 9 / by tha action of ooluan 12, and alnw 
#97 * • in tha fourth position of tha ooluan containing it (U-35- 


/ for ziB — t 

&* { gf iiY mmm 1* thm f wr tt powitHm^^L* JT! #J*T* r * 1 ^ 
i jpor ttm •»!« 





follow 12-4* Of ixmmi 

ZffittvrriV, brtttUd o poittt oSSd 



on tho JW> 

of UmH> 260 




I I * » H 1 F 

: * • * * 1 « i 
' T • Z I I o Z 


«1m Mi qp fax 

(thm oolwm doolpiotod by tha nKth)’of th» 
ftquonoo oottld possibly begin «t 

Mousing the 20 Iow ooImbi m 

bofon at looatien 96, 77 or 98. This 
mppmared as follows i 


89 to 119 
it 

of too 


12 

tort 


S *2 
02 

R 7 

a p 
8 z 


96 97 96 99 100 101 102 103 ldi 105 
1 H 61 91 121 151 161 211 2fal — 
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t 
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B 


Z 
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X 

I 

0 
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V 


Q 

6 
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Tho ooquonoo 1-31-61^91, tie* Crwpreeontlnc a setae of the first 
onolphor rectangle) was slid la the various passible peeltioas* #1 
under location 9$ was 1—iMatsly rojoetod, sines it weald laply 
a plain text 7, #1 under location 96 (as show) was i^prnlidbla, 
oino# that placed #161 osar ths l/t/i triplet uftdeh tad previously 
been determined to oooapy the sesewd plain text pseitii and there- 
fore would have to sons trm ths tap of a oolnan In ths first trans- 
position prooaesj bat HBl was a wary poor looatien far tha top of 
a column since it InpUed that 7 of ths 9 nnlwns anahsrwd 23 through 
31 would all be long ooluwns and therefore adjacent In tha toy, 
Placinj #1 under looetlen 97 ahsend up well, sines tha #151 tbowe 
the 1ft ft triplet 


jfTurt unu«r looatlon 9* •*• P«or for wp. _ 


* n if). A t ** t unfc-r looatlon *>»- r!l f r aI i probable 
Zj**' l 9 lotion 06. aim Mr t..io wmrm mOm lor •** i 

* •«* " «*»-••" - «* b * ,t « 



A Hoond atteapt >«i —dp to fit • probablt ooiuan lor tho X 
position in the toy. The oiuMd toy t'rng m m n t eae Nt up in oil other 
eooeagoe in the oirouit uiioh wrt ptrftot r«oUnglta in tho suoond 
#nflij>tor dlagraa, and tho reaalning oolunno triad in X poo it Ion on 
tto l»aeie of tho significant owouf ia^« iottors. Again aalumn 26 
see tho boot of several possibilities, although it. was no tod that it 
irt>uld not oonftm thm c*iiR/FT3 S9i4tjt"bi(innin^ prtTl outly antgrAm* 
mo‘j* Howovor, t/iio boginning oao discarded tlnoo to produce tho 
only existing R/a pair ao tho third lottoro of plain tost would re- 

f°f uan 1 * 2 ! °f 11 40 •«P«* , ete 6 and 9 in tho hoy, all of 
wflio/i had proved to bo Inprobe hie in previous toots nods. (Actually 
thi. beginning la tor pro.*! correct a. onogro— d, tho «i.iucT 
having erno .bout because the R/ 8 pair oao incorrect , on R/Z pair 
bolnj tho correct one, with % garbled for «.) ^ 


At tills point on atteapt 
for thm derived nuaorloal f 


to re oarer tho literal key 
A I 


12 8 26 9 18 19 
* E R E l l 

0 s MM 

s r N N 

"riMsaije looked promising. ■3C4A>T* oao likolv tn . 

til * k9 J' ■'«•<*• nil. .aula rwiulmd column 27 to rulio.1^ U J"S ,nd 
u»t.u yi.Ja.o o.oollont ooMunaUona. n*rth.r «m« 9> ” n 

raiJl.j, r.^ulrint only that . ooluan of .puciTiuu .!T* ^ t * 

for .1* ...u-.o lit, rU tty no oho. on uSjoU^TTlL 
»iit, *na .Inc. um, mUnd only . f.« ^**Tu. 

oorroct on. ... readily confirm. f , a , ‘ „ . tt ** f * r .»- lflh > 

••quvr.c# i 
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d 26 
E S 


9 Id 19 ?7 i, ^ 
E L L S C H 


2 10 29 
A. V T 


The procedure from this point was quit* simols th. 

* - 4 
1 wfltf*’ 0 and an "TV® * * nd 1° hawing been located 

s'--HiSH “•=S.r‘= ;sss-»=r 

^itior E*y •* a * t ' nua iottnd. to bet 


V E H 6 ICH B a y N 3 s * K T I E N 
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^r-.-ri<*> * n^rlT OOpiUTT^T 1 tMt' iTSiohr 

»«* . — **• » pnr., •». n*. I** wtkn£m£! * 


rn 97 *33 

H r k A 9 D M c 
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uroxu in 

uhh oif 

OZPVD 10? 
VSPSB T SI 
b u X A B M S U 
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M 0 

HURT 
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0 I 

mu 
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Z It 

rsvis 
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X A 

BISTO 
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SILPT 

UMOV 
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J U I A 1 
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HI 1 UQ 
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oate indicator group 


Tt* suoetitution alphvbst used east 




I IU * 


A bcdf a n i j n. n no » T 11 M u 

on » * 

f N » ■ . 

N 1 » 

pucoiDvounin jhm m,i,t o 




ITlth tlM oonverelon to the flrtl alph«>>et, this 
.pp-r.d *• folia*., 


11111111112379321 
01231*547090 12 


irsivisiiiivfvoaMTFTHLPuf 
mzior uTPMiioruimpoutf h 
ZRNUimRAUX 4 PUaT 0 RlHUX 4 
scHuiTirnupsoHi irkoyqlom 
H I i 8 m 8 a o I u o r r nr u u n a u 

m il 


This ippMrtd to bo Uw elrousstanee ehloh hod boon 
hoped for but hardly expected i namely , a eoeeege trenemltted 
without the application of the trane pool! ion .tope. The Uorean 
hMoit of repeating proper nemee between X*s tndioatee FWCHXi»’lS»GHX, 
for the oasouflage rules of this system require the substitution 
of X Jar C and S for X in the second lino ol a rootanglei 
XZWOt (i£MVlZMOtV&HY appears sith the required substitution of H 
far Y end N for P in * possible third linoi the sixth lino 
beo ottos entirely intelligible wlthO becoming M far 4NKUNITTXfLXC0| 
eith Z bvoomlnii I and I, N in a possible lith line, the complete 
orlb is evolved. 


*gss 


dh la Um ______ 

October, *hat nmiI oortalaw to bT«lf an ? r ***• °* 11 

0,MWla f <*to oC •aclSLllS^ir* *“• 

~ V ti. 


acthod m dooorlbod la th* ^ 

( 0 - 2 , Cl), GLrottlt 0 - 41 ). luttC ® 


this 


It MM possible to 

*°* x «<9Blrwl aabcutatu 
txmtpld, tha nbitttitiai of X f w * hiUkT^ v 

no aoro than 17 lottors aaTappS L ( IS!\}£*?> — — « 



lottora la 

uaad tho original 
tho word 

Q(S) OOUJTZCM HT Kir rrmrTff 

Aaoth«r oaraapla of utilising tho 
dphor ayataa an an aid to solution 


for tho additional 
foaad that tha 
nth tha 
**» position of 


«1 o o l i nth a comparison 


of thU 
of 


dlhoa tha rolatiaa posi tion s of tho ▼■rlaaa - •» «♦ ^ 

k* y mvv -mi* It bNM p£Sk ?• 

n - r tl»cr.UMl teotatoM far »l>Uca. JUtT* th.^IT£S * 

• oottptg loon of oolam of coaplotoly filled aannnd ...t «- . 1 ** 

di^ro. (mlUplm ot 







2 3 8 k 6 5 PW X 7 

bkbokistal 

CDfBjMMOrQ 

u r w i T x 

r ABCBFIHIJItMIOFqiltnllJJ 11 

rz^' J O v X* 

- 5 ’* 



Xf wo trace through tho atwrlphorlno p roo o oa , 1% 
that In tha firat onaipharlng (31 width! 
oo&tmtlona of tho warlabla Lotton 

for aonpl« • t (Oiphar) mrtLml digraph woold bo « an pod tr 

0 1 
(ruin) ooourrlQK on tho third nd fourth 11 woo mpo qU uly for 
tho flrot dlogroa. Oh tho other bond an 0 (Cipher) o n a htwat loa 

. ' f 

would noon B (Plain), S (Plain), or X (Plain), any of which In 

I * I 

mu oh lo aa UJcolgr than tho I (Plain) abowo* 

S 


In oonplatoly flllod _ __ 

digraph# ara tranofarrad horlsontally into tho 
than aoraablod by tho oparatlon of tho append kar. Brin wotted 
attaopta to unoorahhlo tho it~1ibbm on tho teda of tte wariwhlw 

Htfr dlgnrhs roratd teta- «*»,. u taTteootai 

1, oo^rln* U alth aaah of tte otter 30 total asta> 1 tod 
tho ooluim that adjoins It p r o du qa aart of tte T 0 fdchtw\ 

JOTJ dfM tta la b,. SrSJS; JwSftT’ 

with aqy otter tolaai should aaruljr prodaaa dots chanoa diov&nha 

-- — * 

x°^ i t r^r^ i ^t s*# T ° (ci *~> Xu 


1 

2 


(Cipher) 
1 £ 



3 

U 

1 



r z 



jhg total plain text probability tm- 
fVaquanqy of T tinea tbe clnhJr,^..* 1 
into logarithme# There ara 6h w w r iT^ ** 0 
digraphs poaaibla. ^ AOf w * l *bte for 


«* 0 . The 


la pat 
6 b 


All completely fllUd aaoond 
tanaonaly and aaoh element of tha k^I 
one. 31 i 30 ooflptriaona In all 


It ia alao poaaibla to oonoldar 
apart, and make weights for t 
more tenuous, and oan only ba 
oolumna already selected. 


t® corroborate 


tba adjacent 


This method vaa of value In attairina 
of small segments of kay «d vhan 

it. was Solution by thla wthod *l im v 

principally bocauso enough oo^lately fllUd 
were never obtained* 


**« «r crlba 
not achieved. 


A very elaborate extension of tide method <ru 
used successfully by the British, to whom tter« was^v!i?2?/?? 

gr “£ r oT w tnffl °- * O-PUU deaerlption 

•V *» in ToUm n of the British •ttwv-lon.rfi. „f “ tho<l 

Clandestine Systex.* ow/olope<tu of 


It am «— » c 

.-—it* crrp*°zr*i*d.c rmtc 
*• *l*o •ffect^d f, 




S33 iTt»X t SL?S^ r| ' 

«£»■; tzL'iZZt s* ~t 

referred to o? rrmmmr by the Oernan. twTlC— •y ,t * , “ were 

p-ocedore 62, ®tc* These procedure* ** P**ooednr» 1*0, 

in Om *ubrtitatlon procea*. in procectarTTn *nm ABC Schlueeeel 
£ applied to all latter, of * Poodle nbHltntlon 


b. 


_J7~ TZz^ 1 °® xor » the double traaa- 
^ *" ***'"* r ’‘«* °* flreqaent letters i 

csiwoauHnc pmtdres op procemse a 


caoouflage of 


62 la 


latter.. 


baaed on double transposition ldth 


tan line*# th* first line oooeletlng 004 10 

.p*o. *ft«r iLh letter, t£3£T3 Se phj!^ 

under the vacant apacea left In the first b 1ow 

that oorreaponda in m u ebe r with the iiSIv with the 

~««»nonth during which the 


apaoe 


key 1. to be need, end retarntn* to tt*beSa,'’2 , 1J^f h 2* 
/111 in th* rowlalac 1 . 1 W. .™ «• eetHaHa, of the line to 


fill in the r— rit nT nn, letters 
phrase *L4 MDJB IU0 HERM36A 

thoai 


£S.S“!£ , i*“ ‘f* 11 «“ x*y 

■**■* DEL 3UR» aoald ho written 


l 1 A 2 » ^ 11 , S , 6 R 7 „ 8 A 9 , “ U B ^ IS 

S D H /I t » I 8 P * N A D I L 8 


* 5 rh * c 7P‘«WW.o »y» too supplied to the oopionog# ogonto 
Colepaugh and Qlapel who were arrested on th*\ T — ^.1 <_ *. 
.ru ted states in ^eoewber, I9kk, appeared to be a Procedure^ 
rlth the oniaalon of the substitution proceao. 


^ wr p**-" ,<r *“• — *» «wxi b^oo., 1 l “ l ULI t 

i 5 t z^Z x JH" a ' r3k '""" .o„ 

Jh* **™*^f*^ * c *J r ,w ®ld b« d«riveri fw 
^ o^l »“”>“•• Wvwl **<• »*• -vmm la 

jjie doable trwBuogtf ^ ^ pn* oe ^. 

#ab-o*;JJ JSLfj^fnciphwr Ug i^tanST^" 8 J° **» *>U«rtng 

j-/or* tie < w « * g corresponding to t^T . directly 

St, -Mg 

to the left of this oolxom are a i*o on tbs first 11m 

■*“ 4 " ~ J?*!' "* tbm "*—ee 

•T the nwK... lz_ _ 



f and rim 
0 and Tim 
H and Tim 


This cycle is 
encipher rectangle , 
crossed out, — h«| 
rectangls la 
Into the second 
under the number 
step consists of 
numerical order to 


STSyjSM *5* »••««•• The • so and 

»• wy length 51, The text of tbs first 

*» «■“! «■«* and written 
ftorliootally, beginning with tbs square 

-c ndtng *o thj dmjr «f tin month. Tin final 
transcribing ths ooluma from this rectangle in 
* for* tbs cipher text, 


o, soujncm 


(1) SOUJTLOH BY WANS OP A RECIPHER 

WP was a circuit operated between Tangier in Morocco ami 
Berlin. This circuit was quite distinct froa U-S M which has been 
previously described, although 1^2 was also a circuit between 
Tangier and Berlin. So far as shown by ths traffic of both circuits 
there ras no jamectloQ between ttm two* 



*Dd UMimt n> IJmMhI Umrn °?*** •• 31 Wh 

ZZiS ^rrL- »-*X. 


^ . 1 . l 1 1 1 n i 



Th» low portion# of th» V— ocmld nov b* 
li^tano., th.lwp.ttf ooXmm 

i. iuMt-o.1 «ith it. x-JTpm* rfoSii 

m; fhs. ooi^, * 1. ^MTilnuS^tt roXTS rr** 

th. foUoirtBf MrlM «f ltaUtlM «M «oit»d o*M«**5 ^ 

" Wratu *' -Mid b. rtiJ.wt 



2 6 5 7878194739 



U 0 l 


* 


oond 


*12*1 


tt6tT3S900t S99k lH *|| ??J1 

- T .— , * 7,3!, ‘UTI5 

rt p nMOfi « cjolio “•®*tloo. «, 

ttap lc y # w ith tin do elm tl on P * 1 *— station «f tl 

dUpUoMMit of the idmtio2 ljaW *“ 1 


5 8 (1) 


Mttiirt ***• * * o »u>t of 

AoaK « « tho ondo of th» 


to be one or two aore ** l no «g y «t no 

Con^qujmtly tho r^tm S!e£^TJi! 22 c «n*<* 
ono or tno plaooo to tho J 1 * ^ *«• probSit orr— ♦ 

lateral cm» {!•*.. th> — -*■ **i«l It m found tht***vJ** 


th .x^z ss xi-u 



2 al 2 2 2 2 2 3 1 1 1 1 II t 1 3 t 1 

tjjA^Ok 7.2 3 5 8 kl 1 78^81266 7t3 5300 I 

0 0 * 1 * * 1 * »1* * x » c c|t F I K 1 F |*J 

g r s s/c c r a w^x|h °®n k{r ? 8 d d b)o k o t v vjw 0 

' rl * * j * > c g 3 afo^R x u alnani ilcT k 

— I s a ^ R sRD H»fusjf FDC i t ir, i 

r ofti 2 C H ® Jjl 2 F I 8 X ij III l|'U* Tiff f (c* V L 0 

Irliccosaf ioqoi yjw k aoyuT niCLe 


z,i 


i|T * 



Thua, 

phering rectangle, it na « 

enciphering rectangle eoccrdin* 

recover the original *■ 

in the eaaoo/lege w _ 

of the nunerieal key to two Si 1 ^ 

litoral l^tadth. 

fiLCA BAilR 

CHl/rjOT§ D 
X ^ ^ 1 1 21321 

n 3 5 8 1 2 6 O 7 3 5 ? 0 0 2 


JCIOMKKUN OkTIT.i 
pCOROCGROKTVSK? 

X X 2 UNOKHMPIRHI 
pASiKIfil TLXKDOSi 
“SFKSIKSn TR F3 
X S a K B : 2T 3 0 ■ f 1 f X ! 


N 0 I 

J 2 ®« ID0XLKC ICIL 

|lDJ 3 TRUCT 0 RJ 3 £^ 

ULb?irRPCTORFSrr 


11* 


s a.'ssw* TiKa 

* • T n® kav aa — _ . 


I 

18 8 *.* 

K> 14 


^ ..- ^ ■ - r,^ «J.wnax* i, 

of Mjaoant UUtri, Tha kay mm 


U 


17 




2 

C 



C A 
A A 



all 
0 T 


B S O 0 0 K 

D I L A M 


Q U 

A N 


Thf loot group 


o«t to ba in indicator, 
“ converted to 


aa had bean 
fcqr naans 


1 2 3 1) 5 6 7 8 90 
ABCDEPOHIJ 

klmvopqrst 

UTVZTI 


Proa these maarili anna subtracted (nott-c a rryMjv or ) tha 
numerical equivalents from tha sane tabla of tha third groop, tha 
result bei ng tha enciphering data* In tha nsasago dlacuaaed, tha 
laat frroup KS8ZT baooaaa 15968 and tha third groop TL70I beeonaa 
02659, and subtracting aa d esc ri bed above, the reaolt la 13313, 
which should hare baan April 13, bat waa garbled* 

It will ba observed that b*re again the oaneeflags om found 
to be an aid to solution* In faet there la anna beaie for the assertion 
that this particular syetoi anald have had greater s eourlty with 
the substitution ooitted entirely* 

(2) bcumcm by usus or a complete chib 


On the circuit just discussed* sons messages ware in a 
different key* In this class of massages tha first group began and 
ended with Z (e*g* zxu Z), evidently to indicate that it used a 
different key or ns directed to a different agent* The use of 
taro keys in one system caused difficulty when the Z indicator «as 
ooitted by mistake or when key chances were made; hence the agents 
frequently sent questions and answers about the special key in the 

regular one* 



Possible eeooad ftidpiwnwi 

1111111111222222222233 

innummiitiimimni i m 

iLOHOIIOITAIXAIFIXXICUIilOfllll 

byCBH SHPOIII TOI1IIO lCW_OHOj 

Since in enciphering, the oali of the first dUcm beeawe 
the "plain text" of tfca second, the qVlaenc of the eeeoleed version 
are matched to prnrhme the oaime from the d e ciph e r e d version, 
horizontally. Taking C9> ae a starting point, it is seen that 
there ie only one I in each diagram* It neat therefore oocupy the 
mm plain text position, sad emet orrtnrtrts as sheen below* Thus, 
allowing for the oanoaiflags, (30 becomes CIS, and TLH becomes T IX* 

T T 0 T 
f 1 I 
C T I 

Since the only possibility of completing the 00 combination 
ie to change the tentative p i a n e w e r t of abort columns, this is 
done -nd the enagruning continues until the entire diagram la 

filled in. 






IUI 


********1**22222222233 


' 7 *Jj I *KID*»i!J VOKN 3 NOlI t* w Q II 


JL1 


JC K 


«n t** 


lxai niMKroKUTUru ohvok 

Itcihti qcfdm 


To dariri tte Mmr, wm find that oolmn 1 of tte oorraot 
j.oiphanMntia tte >«mu oohn 8 of tte ocnroot dmalons 
ooltan 2 i» tte aana mm 19, rtc. Tba actual atvtlng paint of 

th* k»7 w "f, d ? t T!^y? ri ^ u ^ y wd tha literal lay 

«U 1ULSFQMICA £8 UX ESXFJSB UOf ALTO», mi derived* 

LA I I I» * * OX I C AltU X 

lto^ioifzozoxvta 


11 2 2 2 
8 


111212 11 2 212233 2 


TUXXE 3LCZN0KPM0S 


f v il 
5 01 


The data ladLoator la this dr cult prorad to 1 
from tha and, baaad an tte 6 th from tte beginning. 


•w of* 


cKirro mxnao nun mu 

fui* ■» t * ¥>d 0,1 •» 

n) PmrUnii.9 •MwUtuti. 
Mgr 


la • 


( 2 ) 


°*» • » uu 

U» L 


Th* substitution .top iUUm an _ 

ESHlS? ^ 5tb 

i 


DONIN 

arm 

T B H C F 
a H K <4 U 
Hill 


The plain text la divided into Toqpa of fiv* letUre 
to facilitate the aubetltutlon proeeea, which la u follows t 

(1) Flret letter of each roup la replaoed by the letter 
ima-K. lately above it in the square. LetUra on the fifth it,— 

(V.OCCZ) are coneidered aa bain; above thw flret line (DOKEkt) % 

•• :. f P beoomea 0| M beooeae X. 9 

(2) Seofevl letter of each group la replaoed by the letter 
imaedlately to tho right of it* Letters In the flret aoluaan 
(IWOT) are oonaliared a a balm; to the rl ;ht of *ol«am five (MLFUZ) , 
e.f>* b beooaaa Sj P beotaaea 0* 


(3) Third letter of ea h group la replaoed by the letter 
lamodiMtoly below it. The flret line (DONKM) is conaidered aa 
bein’ >+lo* the fifth line (V*XXZ)j t.g. # X becomes Nj R beoonwa K, 


TOP SECRET 


to «*» loft of i%» STrtrtK P%l>1 *^ 1 V it* i.t*— 

*,i" 


(0 nfth lottor lo plain. 

(6) B* M- 1, J ^ Plain in all 


Tho *ub»tltoit*d tnt in 
_^ioal k*r» d#***#* ftnoo 
£^1* written mtom tho top of 


uCS J** * <tU*troot 
"f* 1 W7. Tito qiiM 


( 1 ) flrot onalpfaorlnf itof^, 

» top lino 1 
that of tho 


AU oquoroo on tho top lino to U» loft of ^ -» 

•o thot of th. 

raotanclo in 


ouaftor li th* • » mi or tho day of tnniii ~~ 
Mt. TI» wbrtIteMon tart 1. th^tlttrolTST 

horizontal linoo. 


( 2 ) Sooond onolphorlne rootonglo. 

AU oquaroo on tho top lino to tho loft of tho 
«ano number oo tho nonth oro nartcod out. Tho taxi io 
out of tho firot vaSt&n&o in odwn» aooonktnc U thl ST 
oritton torluonUUjtrim loft to rightiSotho oo^d^tSjlo. 
To oompl.totho onoiphomotit tho tort io toko. out of nUoooST 
rootanglo hy ooluono oooordlnc to tho motorloil k^. 

Tho cipher toxt roaulUng from tho «oo of Thrfalron liO 
ha* two ldontliying ohoraoUrioUooi 40 

(1) Th# lot tor, J, «U1 how* tho oono froquonqr a* it hoo 
in t:« j loin language bolng ^ 


(2) Tho fttoqu a**#/ distribution for tho ronoiainc lottor* will 
not bo a# flat o# o dlotrlbutlon of randan lottoro oath lottor 

roprooonta its oon plain toxt volno ono fifth of tho tiM* 

b# SOLUriUlli IHD KiDKHV-CSUTl 


On 2 July, 19UL tho LUuhrid and Couta station# began to transmit 
laoos^e# with chart ctoriotioo that worn unllko tho mnchlno oncipTtored 
■»#*«;©# sont fron 30 ‘larch, 19Ui through 30 Juno, 19tili, Th# follow- 
ing factors war# noted t 



* n 


and 

text* w 

>*d cot 
int3 aactiona of 
telov. 


y*c# 


TJT T~ m ^ * lri ^r oouat of 2*5 
^5^2* «* *W and th« otter at 1706. 

. ••• latter*, and thm mm ranuti 


. . . ; *iw w»n i 

Xt "*• ***** that tte plain 
th*t tte teya for tte last trana position 
■aaaa«a* tea arittan dona and diridad 
d ai^ht latter a according to tte rapaate. 


1 i. *u 3 . k ^ 5 6 L 

1 PI58L TELE rVTTp F1V7G rilOT MACfeN TNAERl HSBZ N11IPD 

30 1617 IS 7 26 ^ 

2 :tsh n|24 mxp *wjx> £ato wozfrip nton| mceic n^ns 

7^a 9 10 U 12 

UJKC JilPS ±IEP SWli HMBXX SPLITS HUIGllLLJA aik>0 

23 T 9 13 a ,25 22 

fizeft ispw c^jv lpsh|osjlii espz aniie| achat i:^xb 

13 lit 15 ^ 16 , 17 l® 19 

JXTXb liSTLM OBCC CT.tL QPBRX SHA# DEjATU ?N0±, IALOS 
6 ^ 12 , 13 ^ 31 h t 15 ^ 10 

0LP11 TOCftS WLS’ICTBN A0(O0 cCI^, NNTIM 

20 21 22 23 2U 25 

icr^op DAEIC Si^Aii ADI* MB* AX ($BBM 0113(1 IaNIE 

*8 2h 29 20 2? Hi 

jjpj. rc^ s*:ar upss ^sxu ifgi)i lxclh 


26 


26 


30 


J JU C3jLS HflLPG PIPA *B>L6 >JPSI * .4& WNFUi 

“* 5 *8 U 1 2 ^ 3 

j TN C . IF ^Ar3L oUIGf ISOJ* ^EF mpF HUTOK 




ZaTa^a are 9,10, 19, 21, 21*. 27 

rnswers are adjacent in the'kf 8 * "“*t °.° r 11 » and 3inQ . 

£ ,ltwr th. oorr^t k.,. 

In reconstructing tbs Ut-,. i , * 

tX ardned» It vac aammul thatch* **“ aboT * «*(jmbo« n« 

^ SJ p T*\r 1 “** **- 

;_T;- word* of th* nh*.^ , Xt assumed 

fasdnine 


numbers rise repreoont ® h ♦ wl ^ Spanish and that tbs 

ST that the last two wardTT^£L> att «*» A. it WTIseumd 
noun ending in "A", and th* startin/^!! ’** r * ^ aad a fasdnine 
The literal key found to bo n»T rr t , TOa ad ^ a »ted accordingly. 
flfitfSA SALTA LA LxEBRA the P*^vorb: DONEE )3M0S SB 

22 11222212112? ■» , , 
7308?90U78i5i t J2; i J,l3 1 Hi 2 

DON D £ K S 11 0 3 S E ? I ‘ , 7 » 6 1 3 H 8 $ 3 6 6 5 

jfl 3 AS UlALUl!BH 

The transposition key phraao , 

jssjsr - of elght ta * 


The sane key phrase was in use when the ranami m-v nn« 
stopped in February, 19tt5. ihenr, t£ hand-e^S, !is2L ea _ a 
sent only when the cipher machine was broteT^*r c l^h!^iL^rti ma 
were delayed. Apprcodeately one hundred 


fjfD MCSLHS3 




J' 




USED I* CHILE 


ussselraa ..as a liana— operated cipaer device cam- 


fhe 5C A g\iB, one showing on it» peripnery the ui^its / to 9 , 
JtiA 6 ^.naard alphabet A to Zj the other 3 homing on ita pe— 
ft** 0* 9 ^ m Zi0ord m^ced alphabet. The latter disk was proTided 
?j}*t/ * r notches, into wh ch could oe inserted a stylus or 
iit/i Evolving the disk in process of encipherment* Figure 
L„cil Iot 00 two diaka separately, and Figure 29 shows them to- 
fg ,how» {ar uB99 (Photographs ft-om a device captured in 
^^rious fact waa observed: note that the xnner disk 
A the cipher component, has the same sequence as the 
tt‘ J^n^pgnant for the Kryha machine (see Part II, B)* 

FIGURE 28 



FIGURE 2? 








A 

1 


V J 

6 ( 1)0 


0 

7 


F 

4 


0 

8 


a 

s 


4 

8 


S T 
9 ( 1)1 


A 

8 


^rictl key wm extended by rtlln i two fl«vM for the 
fjd* •'fffown in tho n»uiw and follwdjn* with 4 
tf^^+i-jLrrcmp, Tho flrot of tho too foregoing 

proocrlbod eyetew ttrao prevailed any aeeeeae of 
2 SJroTSlhf *«*tl tho eecond oaa f or tho 

^ * gfffiiti hawing exactly tho one naa „ 

ffm-grovp, which aitfrt bo tho true tlno g roup or otherwlae, would 

*uwy» T * r3r ' 

AWT0F00A8TA 
1«#74858»1S15144# 

Iho number of gronpe la tho neeaage and tho t laa g roap choaon 
nrf tranmlttod with tho waaae g a , la plala text la tho 
A fixed at art lag point waa art for tho toe diako at the _ 
of the onciphornonti for anople 0 mat bo la jwxtapoaitloa with U. 

Iba lower dlok waa aaved la oloelvlao faction, by laaortlag a atyloe 
or pencil la the notched aaotloa of tho dlak, aoeh notch la torn 
being deelgnatod by tho bay —diw above tho pertieolar letter to 
bo enciphered. (All tho foregoing rorpilr aaa n to coddnod to 
a aelf-genaratlng koy, or ootoolavo.) Hth tho anaorlool boy 
tho key word provioooly ahewn, plna tho maber of growpo la 
sassage, pins a t l so g ro u p, tho following a aooaga weald bo 
thuot Sotting tho two diaka la position U to U for tho atartlng 
point and InaorUng pencil or atylaa la tho notch adjacent to tho 
flguro 1, tho dlak la revolved eloetarlao xmtil atoypod by tho odgo of 
tho uppor dlak, tho lottor T la tho aevaal alphebet la aetod md tho 
letter oppoalte it on tho lower dlak Is rooordod ao tho elphar loiter; 
the lower dlak la than eoved agala by InaorUng atylaa la notch oppo- 
aito the mud>ar 6 and tho eiphor lottor oppoalto U la r ocordad; — ‘ 
ao throu^iout tha 


tigrti 

cxr**^ 


1*071,1 j 

mun 

o r c v i a j 


*9131*1 

U»*rt7i 

« o i * r ? r 


91Jl*lVfc01607k 

ricoiftraMiTiH* 

^TMCf TZlHMii 


k|i01607W8J* 

*Ai-i.*uBWOMLI 
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IUQ1 

i* * a 4 a 


8 5 • 
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c A l 


9 1 
8 8 

H 8 
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t. r*VTCS DS«n RT T _ . 

••ITH A.tOXNT ns STATION 
rm JOO£ atpbaor ATI0N 


n» ^ otp^ ~"" T NS STATI 

aitft « o"** 0 •* ""Pl^lae, ^ "Moii oroo^d 
both dleke In thl» 


■PPilM — - "UlO 


•nd »-a ua«d by 
1 “ "1th " JOi LS«* 

tho Atloatlo 


— "wranaa 

aravrs 

„ iQu *‘ d In Chile. 

•lphebata, baaed on 


MlUJp! tS'SS” S S^y**/ 0 ” *“>' •smtm, ma It «■ 

00 7 *”•. 1SW.. «STS , > ^^y - W **« B«rlln to 

1* ■ J *** 4IC * to conalat of 

_ ®* til “ «*d group count. 

Lcttoni r : S°S m A * g 1 "" «iphab«t. 

'* ri »«■ Wt to ^t° 1,[ >'«T 

}• Lotmr olid* to eonal * -% . 

-rttton In ttoo. ft. m rtil A B P * 7 * I 

i. L*ttmr J to 0. «- ,tod .nd r ^ lv-d ^ I# 

5 ’ SUSTiTm: £ ZJF'ZZ f»* •■ 

grtsaiwljr add th* product "v^***! tl * n P**©- 

135 •quAla H?y ). P ^ 1 * 1 ,f l"» 1610 x 

« 7J5o waiu^^TSS & Si"* 

* rltUn «l tor tort oh th. dSirij 

•**“"« tottld h. Mntton in r™I!: 

MqUMoa Of <"» digits to bo pJ^Ttol ®* m »‘*loU 

rogulrod by JMsisTu^th, r »P~tort no ofton a. 
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7. fttootaotion, Itojuloportod. X oqnoio bruokoto. 


to d *^ «>• — •«! 

follcwln* number* I 327861649782531." 


c lesr. FI**** use on 


About tan nsssam were „ . . .. 

* J72*s ^ rr-, 

that after 25 June the meerlcal in* uri *3 r » recreated 

bj tlw secret mmber 135 STS 


Sine* the Cl mat control etetion wa* > n ai«j 
ward lnrtructlone in a srwtam beine emu.-?.* obliging M to far- 
Argentina iMlon vm an^^nTo TSTSX i r **' 1 * —* «“ 
tlOT* In plain laiguage, no crjnt«niai™t. i i2? ri * * na in * tTOO ~ 

•» — «- Sr2S2* ( ^ 0 ;n““ ry *° 


toct n# •* 





radio tala— 


rU » « 20 ^-ry, 19 h 3 

jx^ltloa arrta. Wlo* o, kaiW^^aT^’cLZ^^JJ < *° ,ihl# 

S£.-xr-5 1 to 

«***?■* *"? ^^io with * ^aidTi J!?! 

Ilia to start «itfe kw a^ala .1 * “•** 

of 1 « tiara mm la ._.*** f 0011 *• P®«*lbla. 

pXj #*».• f« rmbnmmrj, 15 *J 

U» *• awlln . TXir* **Ho«dJanaaL»!?V rti . 

"* f ) ^^-^^gottaa atop all 

as*M*s t»a«las alth last A * **•* 

Clova til aaan . • a ^ Uo noa aa 

a,1 * r •oaIo according BQLTVA&.* 

i. saumm 


off. 


HUl Uw totivt balsa aad «♦«-*■ . w 

know, tbs corrM^niH! Position of tha control 

asnhlrn on at tbs Coast 3 ns»vi*ta.rT*'**v^*?* < ^ * * *l» i lt r 

U U» 0^.73 til'JSLTL. 

saqusaoas. As aachlaa 

1 and Um aaqusaoas al ign ed with »A» on tha rotating 

oppoaiu "A* on tha flaad aaqaaaoa. 

~ of^* “• ■** tw L*r!L/£.£S ^^LTth. 

g? z zzzltzz.vzszz’, s*\arr 

(Mjur. — » oootuuwd throu#. tk. fwi arO. of 676 u fSuoSHT 
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EHnmpx, lolTB io UJIin|t 

ah.vjciowcj^wdksxflszoorbhq 

XIIHiriTZoiTAjpfcipijtojji 

USHOICIiJIDX^Ijijb.u.. tt „ „ . 

•rKTA.lI.YB I, «to ( 


rm r tabulating oarda wmrm tiu.,, 

SLa". iS?? 4 ^ 1 *° 

pondlns to U> nater oTthT^r *** **» 


SSTsSSHlfc feSHs*^ 

A * t, ** r3 NN trtMdttod fjno* South Amrioa. 


“ J oo ^MOQ. oa «h* 

"* roprodiood oa uah aum .roUa.liis'toT. "ij*"®" 11 * 
mre all aartad together, firet on the ker letter and 

^“MSTS * * 1 - 

It waa than oanjectarad that tha firat lattar of each tan 
waa not enciphered at tha a tar ting petition gitnn, but that tha 

m ysta S« l , afas5ti3 £*-• 

rtto th. rMtf t .t™. la ». &t 5 a£S*i£ 

Sf^p ‘ ** •* “• ** * **• «•- — *5 dphor^iSr .t 




n oo its 30 
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qrstuvwxyz 


A 

B 

c 

D 

s 

r 

0 
B 

1 
J 
l 
l 
M 
« 

0 

? 

a 


Y 

M 

I 

r 

z 
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7 3 
7 1 


g It O 4 i ii 3 II j 1 D j j j j U .1 I . 

2 , v z 1 1 x 2 x , o oTi|rn7nniTf 

' f x 1 5536 
2 11230 1 1 2 5 
31430112 
21137711 
53431542 
112901103^ 
ci*i 0i f56ll2301203l8 
2 1 f ? 33U2 3U1115 

232186152175 


056682 
1 2 3 0 1 0 

2 2 3 2 3 3 
5191 7 3 1 
5 2 19 2 
7 2 5 1 3 
4 4 2 12 

3 7 1 2 5 
13 6 11 

1 1 1113 1 4 2 3 0 10U4 

53312340423113 
2711332362320 
775 311 05210464 
0120502332721 
22 41110751636..^ 
116 0242435631061444 
20010144051232 5624 
1261363135232746 


5 

1 

2 

8 

5 

l 

3 

3 


o 

3 
9 

4 
4 
o 
0 
4 
4 
2 


5 

o 

2 

2 

2 

0 

C 

2 

0 


3 

6 

0 

6 

0 

0 

9 

1 

2 

3 

4 


2 

6 

1 

2 

1 

3 


1 1 1 0 2 5 0 
7 7 9 3 3 5 4 
o 1 9 4 8 OH 
4109015 
5 12 8 3 o 2 1 
0464342 


2 31 7 
2 2 0 
Oil 

5 10 
7 6 3 
2 9 0 


2 0 6 
13 2 
12 2 
5 4 6 
1 128 


,13642333212608 
622130141242123 
63340110651023 
1 0 3 146101 4 2 3 2 0 1 3 
325520« 5 2 0 1 6 2 2 H . 7UW , . 


i 

i 

i 

i 

4 


4 5 2 5 

5 4 13 
0 2 2 0 
7 2 5 1 
0 6 5 5 

6 8 5 0 2 
2 3 15 3 
4 4 8126 1 
9 0 0 7 3 1 


1 4 4 7 2 

1 4 2 6 4 

2 2 4 410 
6 ill 4 6 
2 2 7 1 6 
2 5 0 2 3 
6 0 2 3 2 

1 4 7 4 1 
0 0 9 4 7 
13 15 
5 2 9 2 

2 0 7 2 
51210 2 

5 5 2 
0 2 1 
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1 111 

96998786869096988809908079 

96176882748239659906462506 
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B 

C 

0 

I 

F 
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H 
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K 

L 

M 
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0 

P 

9 

& 

8 

I 

U 

Y 

• 

X 

I 

z 
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vertical distributions ««re then Hatched with • Hide or 
off—t of 1 position to find adjacent letters in tha etcher c<»- 
Danant* With distributions of the size shown in Jlrnre 30 moat 
of the distrihftione canid be aetched et eight without eelculetine 
the sue of the cross products of the individual frequencies for 
each juxtaposition* 


proowdurw fcowrol tht following cipher aoapoosnti 
jfSOflQCJiiifllHPlir IIUBZLIO 

Jhis — gpmi rm —a t h— substitute in the —chin* for the 
gael i 1 |#»het. Mqinaot an the rotating disc, the plunger pieced 
^ (he eerrset starting hole and e short portion of cipher text 
iaa*mr%*6 to e w oonslphabst, in terns of the standard alphabet on 
tee Aarf ssqpaooa, by ad v a ncin g the —chin e through successive 
mill— 

this so to al p habet — s then solved to recover the following 
p ]aia oosponeat hiist —a then suhetituted for the standard al> 
pt*t » t — the fixed sequences 

isffitvoialdchrbqjkmquvii z 


um Dsmanwis 

Shortly after the solution of the Kryha —chine as used by 
Circuit yu, the current truffle (in a different eys ten) disol o—d 
that, la an attenpt to add additional security to Kryha assesses, 
thg Oeruan etaUoa would begin to trenenlt blind, using the nail 
JU, ever the Osman laval traaeaitter, and would slaulate Naval 
traffic is nil asternal appearances, with the exception of the 
aerial n unbars. The Argentine station continued to send this type 
traffic in 5-detter groups. 


As the Kryha traffic progressed, the wear and tear on the 
LILIPUT nodal began to eh— its offset. It becaao neoessary, on 
short actios, to do e s additional halos in the o octroi wheel. 


Finally, as the Kryha 


end of the 
traffic. 


fftllod the MJB) —chine, 
circuit, and the Kryha 


■ore and sore unserviceable, a 
was issued to the Argentine 

aessages disappeared from the 


I 


?J JS n# c * ** rt * 4 » HHXK3 UMraow. 

U *3»aE TOMOfKa* UUMOM^IB 


19^ Coast Guard 





^daily. It shortly 

jase starting point. All girl ng"tb>* ■aasTgua , 

L * longer, repeats la the body 

*° U * *** « thirty nsssagos la 

d ?5 h ** t .. , t Y- ao _ f? &< *” '*?*?• •*“ b * <n y copy and lack 

of any doflMto orldonoo as to lsngnsgo. B oo s ts t , by the 

had aTwamlated, It 
* that a word 

b bo vers than sol 

the depth bad 
solution 
to 1X0 aoo 



thon b aired la depth ont to a point 
to abwrfc half of its original amount* J 

the total depth 


In the 

for each poeitlon of tbs 
tbit ao plain letter eas 
aid that the 
reciprocal. Th eee f, 
the solution la depth, ae see ale* tin 
*>rd separator, ftsenr, ae the depth 
unreliable sopy in 


of the plain-cipher 

• it eae 

ty itself in the cipher 
within ee oh alphabet 
of canelderable help in extending 
of the letter Z as a 
of 


on of the plain taxi 


Ebr this ties there so— d aeple Justification for 
that this traffic had been enciphered on on En±g»a cipher 
There -as available to this office a nodal of tin CQMsrclal 
slon of this sa chine, together with the ori^Lnsl ssuattf aoturar 1 s 
instructions and suggestions for its use. Theee euggoettens la 
eluded the practise of adag X ae a word separator, and of 
sentirv: meben by their eipdralant letters am shown on the 
board of the Machines 


1231*567890 

QIEHT2UI0P 


alb 


w«*uar vita ftth— 

bel 


T*e and »<■<»; 
p. tbm 


rt»»e W* r ~ AO -*~ lw "»a in the truffle, 

jnggevtton* for bracketing on ciphered nuWberw 
JSr «f X «d X for punctuation, ft*— ^ ■ 

W . la thi 2 £ore Of 

be to recot ered (approximately 75 had been*^**? r ?*^P^ oc ^- •lpb*- 

ssis* sirs 

Jlph* *t* »PP«r«iU T »r* oat niilmi* * 1 . 

»f * ' c *“ , « r » J2“»; inch raodarad -ooitoT^thTSTtriir 

<-»* ’ 5 T* t "‘ . T ?*.“«r «M» «., toarorir., JT«*Unl x 

•a cipher e letter as itself, end 


Jiana ^bwu. Mugra sac 

knovn device vhich would neve r encipher 
which would produce a long rvm repeater 
related reciprocal alphabets. 


of apparently 


-^r’crssL op ij tto “ 2* «»— •• of «» ioig» 

e« chine were studied* It was observed that the wiring rrnm +yjT 

2SS ol'uSTitMi:,* 0 «• — 

eentacte of the outildi vhiel, was a constant elenent of » 
.Mo o^md th l. cr^Ud .h.lltf thtt. If u. tfr.ot o?t£ 

^SJe ^TSblTr? both letters of the plalzwd.pter 

ptlJp&p • or tte rwultflit dreniti tbrau^h only th* frurm 

(«wl bMkto tha ootalda of th. flrrtS.)S^>t1r^^. . 

S?* 1 */? —1 circuit., frcIhiiTIdS- 

ttonal dlp^r alphabet* night be derived* (Note: At this point, 

D# * n f° notiTed • vegna Idea that a a la tha eolation of 
the Hebem ne chine, there night be eons true tad a basic seou2!<V • 

**}* 5 iJSO 0 * 0 ? * <mt * id * wheel and whichTeSScTbe 

nanljwlated to prodnoe the auceeeelve cipher alphabets. m*t van 

• b *U§lfX d uiitaii!5 ^ °° arW * * m ,,u * ^ • , '»*•*«■ td» n«h 

- i jure 31 shone al phab et* 1 to 32 laaefv a* they * 
ared from reed lag the nessages la depth* Alee 
beta £8 and 81* a* they ware eanpletely reconstructed later. The 
plain-cipher equivalence* are written la the order aeoeeeitatnd bv 
considering the keyboard sequence order a e the plain eonponent 
Thie seemed loglo&l since thie was the sequence of letters wired 
to tin end-plate facing the exterior contact* of the outside wheel— 
reading the sequence in the direction in which the normal alnl*uat 
progressed on the rings of the wheels* The firet 32 cipher alnha- 
bete are for* d, therefore, by pairing the sequence with 

•ach lane of the table in succession* 


nauw 31 



IOASDF3HJIPT1 


C V B N M L 


I V fOU K ?Qai?2 S 5 OA2XTPol,llLI * 
I TOW * Q 8 I t p J SCDO I t j 1 • 

CZrSISlXlMTJBO TAEFHUDO 
8flTIC3H8DPT0HjTQAS8TiZXIF 
P3XCIS0TUF ZSAKILQQTSRXSHOJ 
LIHv^IFBIQVId " ^ 


M r A Z CIDUOiP 
IHTMFJVPTHIZI 
II0I8 JUHPf INI 
RSZQMIlOBfLCdl 
ZCOiUQTLlBFPSJ 
OMFOVmCQDPlBSZX 
IIOVFIIIJILOSIIMF 
I0IIZIBTFDI401IC 
U H A L f OQOZIIZIII! 


iTlIDPUltSq 


L 3 
3 U 
0 Z 

0 I 

1 Q 


FBHIO 
B R 

NOUBI 
CROW 


QTIU M f 3 H 

boaqlrxdtc 

iADVBXGQFU 

PXJBDAFXTB 

BOHNVMKXVI 

J3DLITMB1X 

UJC'iYRQZtiA 

QLX7J3JHZF 

OBJFKTSCPR 


WZRUI VRUTqSCXOlUD 

D E 3 M T I Z 2 F U 0 
DEAXIT ZlVJHOBSTTCRQPF 
IPOmiDPBIXO JKQTZUI 


PXTIZTilBDITQCVlXlOKOHOSJpl 
IIIPOOZBISAMCTXIIBOHFIIJOQ 

osiwicirivQOPiTxominxB 
PrFCVKIOIDJillOSXQMUITQTX 
IQDPUVTZBMLITB0ICBPIKZQJA3 
A C J T fl 8 I I I V VTD 8 & Z L X ? B 
0 r B : D I F T q c X T 0 I P I 3 H I 3 A I 8 J Z I 
XHLSO JCZITaPXDOXF B3I4HQE 
HP JQLKAXXUC8BMTSZVI0SHFDQT 
IMS71DZOITKNI1FGOA1ICXQIX 

» Q U I OHZICIV 10 8 A T S X FFH 

XJZ3BICMOll?KOFVQDX!OI??IA 
VIDfIFOAOIlIZLSTFKJBMQXTGO 
UOTSSBQFHJflTCVOPLJDXFI ZXAX 
AJiJIVJBDLXQMUGPgTCflOKPZXSI 



In the study of the notion of -w. - 

it was obMmd that*^ h ** 1 * durln « the oourae of 

I* Each tine a key was decreea— h 4v 
,ar*r *spU~i an. portion ^ th. **• >—- 

2# Each tlno the notch n , 4. 

reached a position opposite tbs itLddl^^ ° £ *** ou *«ids wheel 
«h*el r- 3 also displao*i oo/pU^tl >? Ur ^Z %r P*" 1 * «*• Moond 
pwl# the next tine a ]» y eae^nre^^ nlddC1 * tomoeer 

3* 38011 tin* the notch on the rinc 
reached a position opposite the 1 *** •*°<»d «heel 

and third wheels were aiwoltaxSou^,,^ 0 ^ 1, P* wl » the 


elnoltjmeou7w^H , OT * r P* wl * the eeoond 

the inner tamorer pewl, the next tin f r! °°? P°«Hlon, by 

^ depressed. 

ooux^e of encipheneent^^bnt^oould^be*^*!. 1 ^ 1101 M °"“ mt 811 the 

G be 3 * t mt «y Position by hand. 

This la the type of notion which 
non-cycl oraetric notion. 


to be known aa oaanerolal 


or 


affective position of th^Srtd^^rhTIl T^thl fi* A P^ itlon tin 
Th. exterior contact point, 

lettered with the norml elnlMbet It!a^^2i!K*Sl5 a ** UB * <i *> *» 
point opposite Q on tin and wlrlna V‘ th A a * tha contact 

the cane tent end wlrlj^ fjtw ».^ n fi r .P?fi? h t £_ f”?** **• of 

the plain-cipher pSrTeoSS *** Utt « <* 

to the lettered idSS^ a^JT^ Wlr4ng 

the wheel in the above poe^on/^S^.i ? ?rj ia€ oppoait * th *» with 
greeelve notion of the outside wheel T^d *? k ?! P up th * P* 0 " 
ttewlati™ order of the a^t^tet *> -teln 

tacts of the outside wheel, it wns neoest™-?^ 0 * • 3rt * rio * con- 
™ posiuoo for eachaeeaeealve IfSllS* “* WhMl 

■“ aide «ith too paper .trip., ene IS? OOOT —*i‘» 
bat the otter dthX |— ■nr' ..nmn*! nor — 1 alpta*. 

W- th ® ibov * eotioo of th. ouSlS^ih2 !°*f to 

to the end airing. Hue, the table of W te£l o J'T 1 J* UUv * 

roprosonto, by pairing the normal alphoboTat ^ ^ U !J 3OT * 32 
with aiy Ha. within the table tin nami t l. 5* A top ***• table 
t«et poiats of th. outeide wheel in termer the 0Dn " 

oi.-nod normal alphabet to identify these e ’ 1 Warily «a- 

34 cipher alphabet# tabulated uTn=ure 3 ® nt * ct P® 10 *. for the 
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F S( 

WttT . - 

V ® s 
1 B JOH 
I uQf 
_ ? C M T 
,11 A ®F 
BATH 8®I H 

A(0)B®OJUP M 
H V *@®C X 
f 9 Z II Olftpft T 

v x s v00® J i cai I 

F *®C B 3®g)U X®Q 
r J W@8(§(X$? IT N l 

u®o®r j c i<Df 80s 
»® zQl(j>* 0 I m d J 
Z $8 SOSO 

l(M)h 


II 




c 


N D _ 

qi ji 

I D F K 8 B® 
M W® U Z C X 
l a c d n o(§) 
ZQ®X« ft T 
JUQ Z II IT 
X N J W®Q)T q K I 
1 8 D0XKB 0 M® 


1 
2 
3 
k 

5 

6 
7 

a 

9 

10 
11 
12 
13 
lit 

15 

16 
17 
16 

19 

20 
21 
22 
23 
2k 

25 

26 
27 
26 

29 

30 

31 

32 

56 MiTtnrLB^r 

afc n ri p a g i ?- j n g * i f f 8 1 s i r j 


0 EQpK X 
f 8 T A T 

1 X©T UAQTO 

8 U Q®R®l®e>K 

n»j oMiiq 

8 A 3 X 80S s€>H<2® I 

C J ?BDXR®0 

F ft 8 MM 4 ( 22)0 a 0 1 ®R 
L 0 C<J 08 (S )8 J S 1 A 0 

8 0 

c 


FIT 


Ji XCW)F U 
®QB1I I 


F R 


£ 


0 


D 


K 


on 


DTTT5T1 


H¥B 


12345678 9 10 1112 13 11*15 1617 13 19 21 2122 23 2U 25 2& 
JinfZlIIOASDFUHJKPIlCIBIIMl 

abcdkfohijklmmopqrstuvwxtz 






•sxxxZr £ vs ~ST 

-* ^irrrEELTSi**. *—* *r! 2£L prt— 


■vlafi 
>2. 

^ UM psn-— - — «»•• JJJ^^^pidr «* iin - • 

Sk*^«SSS- i. ?— *ri2 

^ - }T^Sr. l ^ p 3i*« , ^. o i» 0 2SS— 1 ‘fYJsJi? 

«** I* 1 ^ JSk&Ti* MT^TftS to contai n py 

T# ** *?**» V . . row hlrlMa*. nd tte first occurrnnen of 2 

«<> ~STi*i uurt i««« 

F*on ttesn —Hf ••tattoos. tte follocin* appOATOd to bs tel- 



1* Tfm mobtmm of a certain master of. idsctical colwmar 
patterns at am Intel insured that tte •« naaber of tha saw 
typ* of ooli war pa tter n so old occur at any Intel* 

2* Iters codd bn a definitely howlogoua, or 

relationship batman tin idsntity of tte 1st tars in tha ra 
ratios* of ttesn oc&aanar pat ter ns on suoosaalva lavals* 

3# If oaiTlad far anongh* as analysis of this isoaurptaclsn 
wuld adopts ly sarte to acrcffata tte snaaral apparently idan- 
tloal co’ssar patterns lata distinoUte ones, as ah of which 
sudd rnappaar on snooaaalte lamia and saoh of nhloh could be 
isonarpMoalljr distlaot tea sa eh otter pattern a tar ting at the 
sans Intel* 


ftiua, Uaad an tte aaoood foracedag oonduaion, it waa predicted 

that row 6 aould attelop ao ae to reproduce, a^newhere in 

and 6, tco of tte four tertieal pairs whioh occurred in row* I. L 4 

Ptl«, wnieh did net recur la rose 5 and 6, weld baT^tte™ 
rupoodiaj u oahmn IS, ad, thti . oonUialag 

pairs, which did rmr is r a 77 ** 1B, M cvn * of the 

poadint to ooliaei 8* * wld be a pattern corree- 

td * *~ UeU - *• »wun». X„ r. ot , B0 


o*ttern was fc*ind to continue into c. 

case of a dcxible letter aerr»«» “ r was not sr«n rm» 

fact was tentatlTely. and rather n 5 ?° d 6 * this Point this 
^^ d 5^ 1 fi mlSht hmr * *■» SSS; d *^^ n to i«*ic«te that 

t*®* 4 ' ^ «*rt- afiofimn. J pro ^ #9 » *« con- 

relop, rtartiag with row 6 and c^w^®!^ 8 waa foond to de- 
at thi« point the progressi^waa bSmf 2^ gh ro *J** Aglln 
f«nd to ecBnence in row 32. n_rJ~ „ ^ » •no • new series was 
the progression could be eorrM rnUJtZ* ** waa discovered that 
In .tract, .nr 51 b * ck *> rc 6, U>.t, 

23 pcs. This tat it lad to a fouc+* cyclic within ths span of tbses 
tore of each a table* conclusion regarding the struc- 

.dinica'to cSaS t 2s’pcrind S J*f' <jrph1 ' cduirar pattama 
rtaal, found sUrtln* cue. « 

ool * n> th * r * b = r - *«—« * oio^iSL^tSrr 1 ^ 


ti«n If 1 ! ^cli c esnif estation was considered definite carrobora- 

DOSitTone f STTi Z th L!! C ° nd ,<heel between ciphering 
ooeiti one 5 «d also between positions 51 and 58, since. 

£5? ^ • 1 «« rt <* wheel motion,* 

T* 1 ** 1 r * B “ ln * stationary for 26 displacements 
outside «*>eel. Tram this point, the stripping process was 
continued as far ae any plain-cipher equivalences had been recow- 

Cle 


In Figure 32, two of the many obvious series of patterns in 
rows 6 through 51 haws be an en circled throughout ths table. The 
first one is of the fox* KEKE, starting in column 5, line 6. The 
second is of the for* A-Q-A-Q, starting in column 26, line 6. The 
first practical use, to which these columnar patterns ware put, 
was the derivation of the remaining elements of incomplete pat- 
terns, thus, enabling the derivation of additional plain-cipher 
equivalences. Thus, using column 1 as a criterion, the followir* 
identities (repeated In homologous positions in all columns) were 
noted* 


z-t'-z — ohoht j-z — oh-y— u- 

Hcwevcr, columns 7 . 12, 16 and 17 had some blinks in them which 
(as permuted below) should involve identities isamorpuic with 
column It 
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12 

16 


17 F-Z-T 0BDB3X 


obTl** that tbmmm four colons in thi . aliirnnsnt t*. 

•nd wltt oolmn 1. Therefore, the l»o- 
*** oo^pla tod in «aoh atM. 
d * rlT »d pl«ln-oiph«r 
rnm ooltuma 6 tm 9 ( u 


■ — — — 

j*ir wheel point P«lrtii«» 

i s.nllvr situation 

boloir)* 


.▼alenoas, 



6 
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Hm- 0 , the— two 00 lam are isomarphl a with e«oh othar and with 
column 1, a-oapt for tha anolralad la t tar a, lndloatlng a naoaa- 
aary correction in origi n al l y enroneouaiy aaauaed plain-clphw 
•vulrulanoee. In Mch fashion, iaolatad blanks wars fillad in, 
and isolated corrections mda, as tha stripping prooass oontlnuad. 

Howrwr, In tha coarse of experimentation with tha progression 
of tha colnnnar pattarna through tha 26 rowa in ona oyola, a far 
aora powerful Manifestation w*e no tad. A listing was mads of 
the successive oolnma (in tarns of tin contact points of tha out- 
sida wheel) in which tha colvmar pattarna appaarad on suooaaalva 
lava Is within the 26 rev cycle, togathar with tha lsttara involved 
in each raourranoa of tha pattern. So, in the oaaa of mnnr r 
pattern in rowa &~yi (oadttlng tha second vertical pair), the folp* 
lowing series ware fornadi 


Goluoni CE51IJRU0AHZDQBPV0LFITNXWYK 

Pattern! XCES 11 JRU 0 AHZDQBPV 0 LF 1 TNXWT 
C S U J H U 0 A H Z D Q B P V a L 7 I T N X iT II C 

3o,ajso, far the A «<H U q pattern, tha following series resulted* 

ColusB! zd^bpvolfitnxwtkcesmjruoah 

Pattern! A H Z D ^ B P V 0 L 7 I T I! HIE C E 3 11 J R U 0 
QBPT01FITIXITKCE3MJRU0AHZ* 


of mj oolnim*r 

patten 5 * Uxrou&\ thm 26 level. of on* cycle, involved »ll oolur _,_ 

2 ** T?rZ .lL°7Z r* rS oo-^ciog «t . diffr^t p^in: 

1.0, that the uSt} of 

«* ^ P“ ttwrn progrv.Md, on eweeweelvT 

I Lrr ’ fl , i ri ^TT < ^ c * ,c ■* qu * no *‘ *“'*rth.rwor., «M«ln.tion 

^ ^ *" 7 ob,rlou ® pattern r.v..l.d that 

on l " “*** oydlo orator th. mmrXmm 

of letter* on •"«*•* pndtto,d •«• cyclic Mqu.no*. 
in elwmen*. of Indirect tjwtiV nr « prcnt) and 

by rearranging tV col*, of figure 32 in th. ord«p of thie cyclic 
Mcuer^., * oT ^emmrm tabl. would reeult, ehar.ln th. indax 

liw and all diagonal, would b. cyclic repetition, of on. fix«d 
bt.le —qamnee. ThlB Itgmomrm eWvelopww nt of Figure 32 1. shown in 
Figure 33 »ith th. QWfB (keyboard) sequence perwvrted according 
to the ba.ic saquenc. Tarsi on of the nonal alphabet. 

Surpri.injl/, th. corresponding baric Mqu.no. for th. cycle 
of rows 32-57, »>n reconstructed in the sum earner, evolved as 
another cyclic repetition of the previously reoowered Mquance. 

In fact, th. basic sequence for every cycle, or partial cycle, over 
th. spen of th. a. Magas proved to be the eaae, differing only in 
tne starting points for the diagonal, in th. square for eaon cycle. 
Thus, it became poaalble to completely generate the qua ei -Vi gene re 
square for esch full cycle of the outside wheel from either ine 
com., let. set of values for any row or fro* one value for each of 
the 26 different diagonals. In such fashion, the plain text wae 
derived for the aleo. t c deplete decipherwent of the :» .sages. 

Up to this point, the prtsary purpose had been to design a 
method for automatically producing the cipher alphabets necessary 
to read all the traffic, without any consideration of the possi- 
bility of recovering the wiring of the aa chine used in encipher- 
ing this traffic. At this point, however, consideration wae given 
to mat eeeoanical or electrical aspects of the machine sight have 
produced the phenomena enxch provided the moans of generating the 
eipoer alphaoete. 


It a.* then realised that the columnar identities, which con- 
stituted tr«e nucleus for the oo served patterns, were tns mnifes- 
t*tior of two or more parallel or equidistant circuits through the 
tnrw- inner wheels. *or, the reoeated wheel circuits (through 
toe focr meel$) sere between the -ja-ue pair of sate*! or con- 
tv t« on j.tsiie wneei ; *u i, since tne wiring s^tnin one 


FIGURE 33 
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this amt that tha circuit waa cosseted 
pair of interior contact points alao. Tbervf 
of tha second wheel, which acrw 
this pair of o AeUa wheel interior oontacta, were the 

__ *teO trm one another fcy an 

te the advance of the aetaide ‘ 

« at ao\ 


realization that the 

_ ire level a of the 26 row ny u«a , 

- V • pattern of circuits through the three 

bein^ocapleted through successive equidistant pairs of in- 
points on the outside wheel. This in turn led to 
of the reeowe red basic aequenee as, actually, an 
°t the relative spatial displacement of the current en- 
af the exterior contacts of the outside wheel, bv the 
from these contacts to the interior contacts of that fcheel, 
of the o ri g in a l arbitrary lettering of these contacts* 




The r ea so n for this will be ones evident fron figure 34. 

Suppose the nonsal alphabet to represent the arbitrary lettering 
of the oontaete of the ostelde vheel, end two pairs of points 
anted A-A' end W' Joined by loops to represent two adjaoent 
parallel circuits through the three inside wheels* Then, with 
refers nee to Plgurs 33 wn 1-5, one series of patterns la the pro- 
gression of Identical dreuite* A to I, H to 7, 1 to L, end D to 
T. Those eey be represented aa h s na tioally »• in Figure 3k, indi- 
eetiqg that tha Interior contact points ehioh ere wired to the 
outride contact points A, H, Z, 0 pees successively eoross A of 
the right hand loop at the sene tins that the eontaot points ehioh 
era wired to L, F, I, T pace across point A»* This situation re- 
cta** <rlth the sene pairs of i nt e ri or oontaete as they pass points 
0 sad 0* of the left hand loop end produce the previously noted 
phenonens of ropes ted identities in successive rows for the first 
5 rows of Figure 33* 
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equivalent wiring for tha outside 
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identioal throughout tho spin of eaen 

* *“ found, also , that flee oyolee 
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aw eed®*** 5 * for ***• ■• cond ^*»ol. Figure 35 shoos the second 

•MSI# # * t# r i 0 ro 00 S*°L P ^" t Qlrouit * 32 ) for al- 
phabets 1 # and 

4BCDEF0HI JKLMNOP 14 RSTUV | n Z 
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Figure 35 
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Figure 36 


e 

In Figure 35 the beginnings of a pair of columnar patterns 
are encircled. Fran the previous de.elopaent of figure 33 it is 
odious that it was necessary only to pair correctly titrv*r col- 
umn containing the pattern between rows 1 ana 58 eltri sitner col- 
umn containing the pattern between rows 6 and tt4. From this cor- 
rect pairing, the dev elopes nt of Fiiure 3<> easily follows by ara- 
j-as*inj the columns of Figure 35 so that any diagonal sequence 
is reproduced on the indev line and vice versa. Thus, the hune 
*; r «He sequence «a* reconstructed and, therefore, an sqnl alent 
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Figure 37 


frcw the equivalent wiring of the two outside wheels, as _ _ 
covered la this office, the Signal Carps identified these wheels 
ii the actual ones furnished in the old Comeerciwl fttigna Machine 
(let A- 766) and the levy later idenUfied the traffic aa tlmt of 
the seise Any, The *>eel order ueed for this traffic with res- 
pect to the numbers on the actual wheels was 1-3-2 (left to right, 
ae one faces the aachine )• 


KBGAPITUUTiai 

Although the wiring recovered la this solution later proved to 
be kaoen wiring, thin recovery of wiring assumed to be unknow 
achieved without prior knowledge of any solution or technique f< 
the recovery of feigns wiring and is believed to be the first 
stance of feipns wiring recovery In the United State#* It should 
be noted, h o wever, that the initial approach to the problem, i.e*, 
the conversion of the end wiring identities to their exterior con- 
tact point equivalents on the outside wheel, was an adaptation of 
the procedure earlier used in the solution of the Hebern machine* 


ae/insnents in, and improvements upon, the technique herein 
described have been nude, resulting in more p ow er ful approacrves to 
the problem* Such refinements have established lees cumbersome 
etthods for deriving the equivalent wiring for each wheel* It has 
also been demonstrated tnat considerably more than the mln i n- num- 
ber of couplings necessary to solution were utilised in tuis wiring 
recovery* Finally, at the tine of this solution, the manifesta- 
tions of “twist* were not fully appreciated, (fence, the recovered 
siring wag not recognised as that of the Comae reial machine at hand* 


I 




2 0jx.tihm tubs am. 
sisrcaJ 


nun uwiwiN 

ram lUCHIN* 


If'V'ZrZn go 11,300 kUocgrelss *u probably In South Ansrioa. BSS 
*yz g iteabarf to bordsauai (Coast Guard li-Il had dlsoussod this 
imrviot in truffle which was being read by 0C & CS and Bordeaux 
Zm instructed to non! tor and help in oase of difficulty. Station 
jqI2 used the call BSf also. RSS was believed to be the alternate 
control tram Bordeaux. 

b. SCUJTKM 

Poring October and Oeoenber, 19U2, 28 nassagea were inter- 
ssptsd tram the station 1QZ2. This asrlas of sassages had several 
duplicate nsssegs nu ab ers , (2 3l5's, 2 3X6's, eto. )• The aasaagas 
■sre superimposed and tested for ooinoide n oea but, in spite of 
several striking repeats at the beginnings of aeasages, the coin- 
eidsnoe was rather poor. The test was definitely above randan 
however and it was aseunerl that aoet of the nsssages were enci- 
phered with the sans key but that the duplioate aeaaage nuabers 
see possibly evidence of two different keys. 

Accordingly it was decided to put all the nsssages together 
and attempt to solve than in depth, bearing in aind that perhaps 
only one of oach dup lic ated nuabor would solve and that the other 
would not yield intelligible text. 

actually, honsvsr, all the messages turned out to be enci- 
phered with the sane key. Upon solution it eaa discovered that 
the Ion coincidence test eaa caused by the i'ict that several 
practice aeasages ears included in the series. These practice 
sassages contained s short portion of plain text at tne beginning 
and ware filled out to average length vita dun y text. 
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in the 6 following work shoots. 
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to ItO positions in each — s sa g o. This ess relatively staple sinoe 
the assesses folioesd toe know style end ess aade even siapler by 
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aeoordlaf to tfca ooop lli ga p r adaaad. If tha ooapUnga 
#tMg ya l tha steal ana oooaidawd to ho stationary, if tha 
lias* ohangad steal 3 mm 


Tha aaaplsto tahis of a o— oraim of whaal 2 oonpiiaga to 
steal 3 oonpUaga la ahaasi ia Vigara U* 


FIOOB* to 

AiePSFOIJJSlIlIOFQtSTUYVXYS 

A DIX All J VIOKt POIIfTK ID T H F C Q t 1-5 
9 0 IX 43 VJII 0 IXF 0 IVXKIU 7 HFCQI 6-7 
C D I X A 9 * i F 9 0 1 2 t 0 IX I K B U T H F C Q L 8 -02 
9 linrOFJIIDACHQFOIlVDITU It 

9 illirOF Jf«9A6 9IQF0!KV«2nv lir-17 
F L99XT0F J9M9AC9BQF0ZB7UZTXV 18-23 

0 AVVItif JII9ACBBQF0X If U 1UI 2U-30 
M I S 7 0 F I X 2 A V 2 T 0 J D V H V 9 1» M f 9 3 C 9 

1 IST0F9XQAIZTUJD7H18LMPRQCK 32-38 
J 3A9CITF8QZfU0III0I 2 U F LI V HI 3*~ 




mm 



ft )T>hi itr t [ta k, 


ff r i 





JSS!S«58SH!!SS:5:SSK^.. 

. . , . , o , I ■ B ») I II 4 a) 

\A v *• 9 

to i <f) imy 

D X • CP) . 

!.»(» »*«W) »■■*»■*»■*<*) °° , “‘ 

JBT9 ( 0 ) 

^ 4 rr«m 1-3 «n «m«ri»oeed on their counterparts 1» 
ehUkld XT wfliot or oonttrwetion tgr 

2 ' 3 «* >*• «“ i - 

^So^ToonKr-d r— «lt — » i. 

£* BZR » * 0 f*CU»*M»A* 

2-3 USATFXCUFH H»JQfMXOI 101 0J» 
yX if ixFVXTOl JITilOCXIFO 3 A Q BHI 

no vertical pairs nwIUng frae these JwrtopooiUono »ere 
oarfuSS and piaoeTwith A to A against the neswal alphabat to 
represent the wiring of wheel 3. thwai 

Iiwidoi AlWBIlIIOfCXIlISFFDlUiqO 
Outsidci ABCD1FOHIJI11XOFQR8TOF1XIX 

fh TT l 3 au then Juxtaposed against the normal alphabet re- 
present^ tht UMcehrwalae, whioh was assumed to start in the "a* 
position! aai ths sbaal point couplings froa Figure 111 wars than 
taken through wheel 3 sad converted to Uakehrwal :e couplings* fhuat 

TXlfJVrFUQ0M«CKS3IX0AHSiaFB 
Meet ABCDXFOtfl'IXltflOFQRSTUVAWZ 


1 

2 

y 


* 1 !!"V i ' ,J 5 !S 5 » ! ” 5 ?S 55 S 

;•*.!/» U.t 



* tM> V> V* i </* UVM o ,/» Wi »A w WV 
M Wffi VI Wl « VW« V» i/o/** i W 


n menim n , i l^ ojfl. 17 ^ UkvviM 
hr tho ■rituf r J wSX»*Sr* 10 


and which 
of tho 



WU, _ 
to 338. it ni 



wiring for tho 

muTti£*UtUr 

On IX 

ttod with ertornal aortal »«->*. 
to align tho* in dopth hr ■ tapping 
powiUoa to tho right, producing * 1C^ 

~ 322 aad 327* iftor tho first rapid 
for tho bKiodiwi of tho mmum tho 


XI 


322 to 338 


1* Aoooaw that T alphor ogoalo B plain in eoltaan 5 
2. Toa*ati*o trial* of on — on initial word* with B 
in tho fifth plaeo in nap 322 load to BST1MB 
mice jirnrt ioo d a rociproeal (i/s) in celt'** 3 to 

•nggoot anfBB in ooooapo 323. and (?/») In 


oolmm k for 3MX 

sms in aa 


325. 

fWOWa in noaoa 

<o 32k. 



SMOOTUS X in no 

••ago 325. 

IH T 

Aqtr X in mo- 

nag* 326. IB X K2LB I U aa 


327. Ml X 

XDS HJU X in an 

imp 328, 

11 X 

ms xns u 


u no otago 329. 




im 





1»» >a»u< ggg^T ** 

VLT3T 333 ’ ««— 

P ££i~r "• 

$. Pwto !• lobttw la 1— . jx 17 1A 
9. DIMM la ««M|a wTo",!!* }!• “• 

10. H nr®8« la TU.U, 330 cSLi 5 ^ 

4- *S»2f **“ -—•• akTSl^Is. 

12. AMBUS I la 337, ~o u * 

13. ff» 0W88 la «nS S' JSS 9 * 

14. BUftmass la aMa^a 3a IadS7 ,# -«i *. 

33 lndusiT*. J * 7 » •■“■■ *4. *• 

15* WAJD OB BI3HKR1QH la 
16. BISHXK la -rmn 324. — - — s . 

u: ssr jtsrsr irr'*- — «• 

ft SiTS" 

21* 2KSTBN8 la tthim 331. ccOmlo 

22. WZCHTIOB la ■••Maa ^S sTmI^IA- 

23. KB SOS la awp 333, cdwm 19* 

24. DItSMS AMUCHIRln awifi 338 ** 

2$. IBS la amn 135. 31^14^* 

26. nWUnUEMIQ* la » p 330/001^ 20 

27. UMFANQI la MmcT32 T h1» * 

20. SN0P1XS8S la aiaa 329 coin* 

W. xBaUSTe u^^.^S6, 
jo. mourn t a aaSTL' »Uy5,, :- lB -, M 

M«valii« garble* la ooImm 19 ead a/ * 

31. PUSHT la aNun 333. eeln ?7. 

32. JOINT AUff la aaaaaga 337. colaL 24 

garbl* la ooloan 26. * 

33. MUNITIONS ASSKUUBIT la H|M < 

aMualas garble la ealaai 19? 

34. STILLS PUB la ■‘try 335. c < 

»«• 329. ooluao 


n 


17. 


331, eoluaa 19 , 




JO 

y* 


yn 

326 

329 

330 

331 
3 33 

33 5 

336 


umiii 

*012**547 





locicmixroj 


onvxoioeit 

■ rzi l ii nil 


114X17111 


VIFIFlit 


F J VC ID 


ron 

• 1 • • 


1*1 

• 1 • 


*0123*567170123 


I 1> Ml 
» 4 4 i 




MietoiMmoii 

kiik*rl|tis|*|i 

|IIIX!IlUtl9KAl* 
r ( •! | 


IQXilWCIVIIIRV 


s;s;; »;hhw 

IIVIFOAFPIVIf JX 


DICVC7001F 


VOMIMJAJCfV J ■ D L 


ZAO 


FIFOJ 


P X V N X A A 


XIOItFQTIJV 8VXI 
driUlii(««Dfi 


ITFDVIITqiKTOMC 

iibilgiitilUftt 

H^IOHIViUTZISD 

tMinironitttle 


337 

336 


Z P 


H Q 0 B 0 


kOJVITMQlH 

JoTr. Ur»v 


HftqOUKXQASQV^tOPP 

dimikiitliehini 


ur“jrs6- —« 




512 With 500 alawina. 
plaow. 


501 

to to. right 

M !•«•« *» »'*'*? b£ 


509 


510 



***** l.tto« in Uth^J[« a «^^ ginning. BOSS J. 

506 - nuSr. - — 

f^ 0 "* MSS in 505 - «*••• T *l“” StoloSd. 

S^t^low .nd M i» • col- cwtolog 

1 «0T of msssa«s 501 to 512 
" llllllllll 

123U567S90123U56789 

5 d B C F • » I H T a « u » » I « l l l ‘ 
xboiij* 1 * 0 *"" 

502 MFlHTf FOXOFI FBWF PM 

503 IXHBH5ZIF0AXLXHLR 
ybo»» jMt JX»»»»*n 

5(* j|0BUD»L3!IiJl» 

lybon Jbiud Jibir 

505 ITHITDIKNPBIQZii 

ftijBiunjiioddi 

506 HKXJCBOKBTCRTII 
xyboiijgBho^tr 

507 IZIVBCHOBEU 
yyboiijiH^it 


amsjupysp^a 

ssbossdrtxi 

PXQCPMWJbA 

i;bonarii 


-Sc 


• TOP 

„!•!“ oam*" 





51 * 


«•* 


~ C*SS S-~ 

*£•££ 

_ - — ■ - - - — — — m 

£.‘ 23 ? 


*«|M tlf^ 1 " - 



,wr ^!L p u*iW «* *■•• Vm^ZHm " 5 T *• ^**11 

P^JfrwrtMT *** **■« *“ -h * #1 

S^f.f 23 S * 

_ a ffifl ✓jJI 

<*" jSf “ 


*,*!S ^T«*frt. - 

fwj'SdSLTS- ** •*• 




r»a« 

»ntiao*d 1» 

543 . Trial «f 


,titt« If *• ■^•f.lTiiro. l* Mr» 

sTk 5 jn.*sirXti^s.*. 


M SHMT or WSSM» «• to SJU mnunim 

X, Jk S 4 »a»Si*3is6T«S.01»JUS67b 


XBXH 0 iFfP«I»#** iilllJ4LJ0,l ^ ,TI 


r • * * 

t3FT0«*FT»* I ABFIICA? i a»M4a?*li 

/o/orpt #inl Jbo« 

UPHSIMOIDIX CZFTDAC NO it * F QLF 
rpt J/itif J»il * J «»• i J bois J d 



570 
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0? SECRET 



?*• oolrmam wmrm thrn • n m l— d for p oaa ih J Lr m* 1 mUow to 
or p^ a t * yU »• I «•!*■» of ril ohrrlawar* .v.ntuaUy 


®3*1 


A > 0 
0 0 1 

0 A I 
0(11 


th*t. **• n«M or Um wonth ms bring uard for tha 
rls^rtollMK* It sraMd quit* odd that tha rings ahould hsra 
to* art opposite T os all sfcrrls but it was dsoidsd to try thr 
ring art it I a tea iMraia alao and to step tea atobina 
back to tat point of origin to find tha grondstallting for aaofc 
tmj. It aaa kncan at this tiat that tha starting point for aaoh 
a a ar a ja aaa daternlnad by stepping tha aaohino forward froa a 
basic starting point a noabar of steps squal to tha last 2 digits 


of thr roabsr spearing in tha nsssago praaahis. It 
foond oat that tha basic starting points oarat 


aaa thus 


Uagatellung 


Orandstallung 


January 


J A I U 


A R J A 


JUKI 


J 0 N I 


Ml 


J 0 L I 


J U L I 


ABgaat 


A 0 0 D 


S T A U 


Oaa of tha **aa course ti on panaitted raaoing of aoaturad 
unsol v»d sassages on other aontha and all aaaaagas intaroaptad 
toaraaitar. 

UW ax a ai na tion of tha starting point uaad for tna 



H OP SECRET ULTF.r 


ffjo up c. niQMit 

U KB) 

Om RSI MU 
Iba fin* 


wntuw OTTOmm 


rlln 


•olr»d bgr the C om a fe Guard,* nd worn 


la 

p 1948. AU 
In the QREKN 


Xl~ 


Ittar «l«h 

r*a RED. Thank you nr; 

150 wo shall encipher with tha a 
tha old device to OMU. Tlaaaa 
with am Ifflgia, IM.' 


arrived 


(ki tha Ma dRgr, tha MS) saotlon aant 
that an additional hH|p« a* 
enciphered by tha Kryha aaohlaa which had 
Guard and was currently hainf 


On 5 Iforonbar, 1945, Berlin 
•action la Argentina, sayings 


llo. 969 stating 
solved by tha 

■o. 585 to tha 


"Re your 145 1 Van 


Tha following day Barlln 
Motion, which raadt 


la intended far RED only.* 

■a. 917 to tha KID 


"INTffiN 86* Tha am Krt gaa which arrlvad toe other with 
trunk traaaittar ia for RED. It la a birthday 

fnr> TIMA. W 


for TCTU. 

. 2 * ^ 6 *"■*•** tha RED aaotlon la 

Argentina sent aaaaage lo, 901 raqpaetlng a Qmad far tha mv 

aakin* that it ba aant wia tha BLEJE kay*» ®d not via 
RED Bryha k ay# Thia aaaaaga want on to a ay that they ware 

lB trM,iUln « • — W — cf 


* Also solved 
*» Bhaolvad* 


lnd *P**«Uy by tha British at ilr. * tha amm tin*. 


Berlin replied to this nm,, ^ 9 
tb# *H> •****<» *° be petient for a fee , 
tb* w * ® coold be forwarded* 




V IMS, that Berlin 


»• will follow u Roe. 
will be 

.f <k. - L ^ -f^wnolphered with 
’ V *"7. »madefeellnng retired for this 
jg7 e m i |n , -^fy 110 * 1% i» wild for tew 

athoii# partly gwTbled efW Sr5 r: !hSw! r *S«£ U * 
9 "* 1 ^ 1 55". ^ ho1 *) *** «* tie. ( 


will be 


The letter portion of the ^ 

Ho# 147 from Argentine whloh reads' 


in reft 


"One to trjbm defeet, flroe gr~ Noe# 849 and 918, we 

will open the f allowing hdoot X, «, 9, IX, IS, 17, XI, 


- * 2, i 

XS, 24, 27, 29, 81, 88, 85, 89, 41, 


>, *f, W, o*, oo, 03, 3», u, 48, 45, 47, 51# All 
holoo will be eloeed# Pleeee adtiae free what 
Too will do likawiae# We urgently require Grand far now 


It will be noted that Berlin atated that wttatgee 961 to 947 
war# to bo doubly enciphered and la tha earn neeaaga twice referred 
to "thoaa SL no e aa goo*# V XT n a a aagaa ware aotually te be doably 
enciphered, than the aerioa weald be Bee* 961 to 957# Thie to— ad 
ej — h at dubious tinea it appeare d likely that all af the a ar i a a 
were already anolphared and aeaitiaf tran— laaiaa aad to aaawa 
that 27 natal g ea wore awaiting %m m nf alien eeuld not be recou nt l e d 
with the a tat .want that the ttryfcn a et-w p would be ch a n ge d begin- 
ning with neeaaga M6. Ob the other hand if the dawfc l a a po lpher- 
•ant n aa a a ge a wart not already enciphered it agoaed logical to as- 
pect that the new Cryha totting would be weed with natp No# 061, 
the flret of the eariee, tinea Berlin knew that the nethiwe is 
Argentina waa dafaeilwa and pr ae n M hl y would net operate properly 
with the eld leqwaae# of helot open* 




•. saxat?; 

N », iT* l i‘*? T l> ?.| w ,*r u * J* kdt Mciuanoa « 

E£r~**T r i* »*ub dLi •*•• 



xo 


at 

a total of 2J~ 

^ bo 




At «0 

l«a via tao BUB 

In too R® Brybo k*,. 


"*• ^ on *9 

in tho BLUE koj u 


•prmw 100, 

It I 

*» to 9 t »7 


at «w.< 


*J to *9 lnolosivo oa 1 
oo t iMooobor, 19t3. 


XX, XXX, I, 

St ‘ 

ttod oa 30 


Ob 30 
in BryM, aaylagi 


•Tour f 31 wad 


noaittod oa 30 KovoMMr, 19hJ, 

# 1A3, «>d 950 to 96? iartaaLin 

» Wt3» Argootlna tranoaLttad nos sago Ho. 913, 


la Ho. 



t to dodphrrod by 
chock and taranesit tho 


right Oroadotollaag to «o 

m mbm r t i ' 0 f 09 '.« 

°* * n,8 " b,r i Argentina eont wosoago Ho. 150, 

plMrMI la tta. «n ftrtf. riHob rMdi 


> Ta«r Ml to 9b9 oaaaotb. dMlptamd la .pit* of COBH 
W «nd 100. Chodk HUM 100. .* bm BMHn t 0209 


Tho ahcao aoaaago thaw woot oa to ropoat tho ouahoro of opoa 
holao oa tho Argoatlno Kryha, tad aloo roqpootod that an *n»Trv 
tloa of Barlla'o n> o r o noiph o n M wt bo aont via BLUE. 

It will bo no tad that tho above ■■ooagi indicated that Argw- 
ttna expo c tod tho douhlo onolphwann i oorloo mid bo ooqpoood of 

onijr 17 aoooagoi. 




Ur 11 


SECRET OLII& 


B *2 i ? Ap « wUn<l «*ld not road tha ^ 

~~ 3rad -~* -2^r 


"Tollowinz asssan iu c*cj, ___ 



> 19U3, Berlin which 
« 


Jf 0 * ^ °* * Dw«b«r, 1910, ncssage Ho. 

2* 2£®* Xi "•» but *»t until 7 d*w 
*o. 59x on 10 Deoaaber, 19*0, -fin BUS. 

Ho tiring further iu 
read tho 93 1 series and an $ 
while bad evidently been doli^ MJ1 
97b and 975, in which Berlin said* 

*■» *>• 13 and BUM 1C*. » got the 

11 Noe 93L to 958 will be rr— 

the balance later 

important. Leaaagea will have new lengths. These 16 

rag_reg JL£**v£r 6 J?v w6 ' t ***» a ■—•■•e— • n»« 

enciphered with Kry ha, hot with latest setting, thsn sxroer- 
•ndphered according to INTSRN Noa. 100 and lot. Reouaat 
i*aedlate report whether It works this tine, t wiwuw io6.» 

f** 0 ® this it appeared that Berlin and Argentina were finally 
about to get together end the typical oonfheioa which exiateduo 
to tM. p^nt woid flMU, b. Xrtft.4. B-« «. nT^er^Hr 

doobt about tha Kryha setting beeaaee by this tine both ir lrt ew of 
th. draiU tad their mt SlhXtSS 

«*, 979 «d 980 o. 6 ta- 
cenbar, 1943# &>s» 976, 977 end 961 to 991 inclusive on 7 Dacca- 
bar, 191*3, and sassages Noe. 998 to 996 on 8 Deowber, 19l*3. 

ft* 8 December, 19li3, ArgMtlaa sent message No. 915, in 
Kryha, saying* »It works l It warksl* 

Qa 11 Doeeober, 19**3» Argentina stated in msaage No. 916, 
in Kryha, that tha details for tha 28th <Uy of the mo nth 
missing bat that otherwise all was clear. 


Om. 1 h 



V 1*0, Berlin 
906 and 907, a 



LtUd the following 
‘ of which ia emoted 


— . -.x of 916 to 918. PEHLEfiDSUDER J 

bp jj * 1 1 10 ** j uj m x nan x xSo^Sj^toeo 
mm otto cas&g jxxj chjsht ulli otto jlnton jzxj 

XU WJL SSUS ZK> JXXJ TOL prop AJTT PB| p- rrr, Lloasaraa 
963 to 973 olth hdo. 13 «od 2i, open. N^901 E<»5 
*• * tartll « position stated in INTHIN 

lo. 100.* r oxlosing MSMgs Bo. 908 is enciphered with 



b. solution 


with k »7 

do ciphered so sill 
with Kxyi:*. Holss 13 and Hi 
INTERN 112. » 


931 to 947 and 948 to 957 incl-units 

■™*t* prapst'Sd in ths manner described 
the 2 possible Kryha key- sequences 
“baas massages sore also to 

ooald be superimposed. The results 

, ___ . fsrerable for some blocks of 

_ «nd <*»ite poor for others. Moreover, no poalUee con- 

2HS ssir£ , ss , j h ss" s- 

had had the seas treatssnt as 931 to 947* Bis entire series did, 
boasfsr,rs*Ml poslttre erldsnee of double encipherment in that 
noils Mrs addsd at the Ms of ssssifss with simple Enigma en- 
dphsmant in snob s say that it saa erident that the text had 

cipher ©roups which had been 

rsdl Tided into 4-letter groups. 


the 

first 
belos, 00 shi eh 
for ths 948-957 


of this latter 


Accordingly, la Ties of ths uncertainties concerning ths 
encipherment of ths 931-947 and 948-957 series of messages, wt 
It bo cane know that tha messages wars repeated, it was 
dseidwl to attack tha 976 to 996 series together with ths 901 to 
905 series known to hsrw boon enciphered by simple Enigma at ths 
sans Qrund as ths doubly enciphered 




The Enigma starting position for ths doubly ^ciphered messages. 




cmpaotnf arranged in the •* 



PWDfi es PFITVow»t«- 

01IA ldch RBoj IM 

cirezai STODiMorj,.. 111 

■Qc* ah*«i 1Fbfii 

It the time thee- 1 ° 


Hs£S 

plar^w In ho!e*B^ t ^ 1 JUTthe* eeqlJ^H" “«ee »m with the 
«m opposite F„ # end the nachlne thUrl? eo thet Bu, 

poeitrton a number of etepI^onS **— Ml beett 

tarnal message a^ber^^I^l? 0 *** <* the e*. 
•ndsd In the digits »X% «2% as» U? ”2 noober 


1 Tine digits "1", eje •«» •+« , ra«»er 

2, or S places respectively frm the beidT*^? ad * B “ c#d 
the snelphsrasnt of the WpstUtW.^E^II^!? point b * fo 
ended In ^ were advanced 1/f planes before the _ ose mirber 
th» flr.t Uttar. Ttw •» 

'J'wnoaa -an ba arrancad lnaw *. *^*’7 . *•" 


•"w* rae alphabets genn 
»«• '*n be err anged in a ▼lgenere 
Z as shown in Figure h2 • 


nd labeled A to 


FIGURE 1*2 


* a k' F I T V 


A 

B 

0 

D 

s 

r 

0 

H 

1 
J 
X 
L 
U 
N 
0 
P 

Q 
R 
3 
T 
U 
V 

w 

X 

r 

z 


3 V 
0 3 

r o 

L I 


onaldchrb 
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B 

u 

K 

I 

r 
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P 

R 

X 


L 

Z 

B 
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V 

3 

0 

T 

L 

Z 


D 

0 
V 

a 

o 
r 
L 

DBZ 
X U B 
X 
I 
F 
N 
P 
R 
X 


w u 

D W 

0 D 
V 0 
S V 


S X 
T 5 
H T S 
AHT 


U 

X 

I 

F 

N 

P 

R 

X 

5 


0 

T 

L 

Z 

B 

U 

X 

I 

F 

N 

P 

R 

X 

S 


s 

0 

r 

L 

Z 

B 

U 

X 

I 

F 

N 

P 

R 

X 


Q c j 

W M q 
D W U 
D 4 
Q 
7 
S 

0 
T 
L 
Z 
B 
U 
X 

1 
F 
N 


A J K U 


Q 

V 

S 

0 

T 

L 

Z 

B 

U 

X 

I 

F 

N 

P 


D 

Q 

V 

S 

0 

T 

L 

Z 

B 


A H 
J A 
C J 
Q C 

M Q 
V M 


D 

a 
v 

3 
0 

I 
L 

Z L 
UBZ 
X 0 B 
I X U 
F I 


w u 


T x X R P 
H T 5 X R 
‘ H T B 

art 

J A H 
C J A 
sl C J 




X 

s 

T 

H 

A 


JAHTKXRPNFI 

F 
N 
P 


F 


B 
U 
X 
I 

N F 

WMgCJAHTBXRPN 
DWMQCJAHTEXRP 
ODVIIQCJAHTEXR 


cjahtbxrpn 
qcjahtbxrp 
mqcjahtsxr 


fl F 1 11 3 3 4 l r ft 

.^IKCBZL 

i jSiz 

D WMQCJ*JS ikRPNFlx 

"!!S * |!H» 

I S n ? * Q ° J A H 1 S * 
® I ? “ » “ ^ 0 J i B t E 

2?I 0D¥M,iCJ AHT 
IOS VQDWMQe J AH 
LT0S7QDJU4CJA 
ZLXOSVQDd'M^CJ 
bzliosyqdihqc 
YBZLI0S7QDYHQ 
XUBZLYOSYGDYM 
IXUBZLTOSYGDY 
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Muter cards for TBd tabulating aechinee were prepend with theee 
sequences of weitfite and the appropriate values ganged into the 
cipher text cards. The cards ware then sorted Into blocks of 
similar cipher letters in the seas colunnar position an the work 
sheet and the log weight a were added into 2B 3-digit counters on 
the tabulator, with the controls so set that the counters cleared 
and printed a total after the passage at each block. 
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With ths rilwi resulting free the k/0 M p. ** ^ 
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ooltam 40 of neas age No. 995. This was tentatively assoasd to 
the beginning of *ZWO". Progressive steps In the deciphering of 
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Position 1 

Wheel entry 

points ABCDEFqh 
Qwertzu 

poflition 2 
Wheel entry 
points 


I0 A3DpQ^jpp®TUVAXYZ 

ul 'JKPrXCVBNML 


BCDEFQHI 

qwertzui 


0 * a 2 “ a S ’ 5 1 T 0 * - x I z a 

dfq hjkpyxcvbnml 


” w r VBHML 

In position I the N/A plain-cd nw 
1) was converted to a I/J wheel point pai^ M 'p/'j n (m U^ '^ 3 ^^ ,6 “V. 
OA 19 78 ool. 1) to H/Q, etc. l”noei??^'o »v. l9 l 7 m 001 - 15 40 Rn ‘ 
pair on figure k3 <976 oil. 2) 

B ° mPiUtl0n 0t co„verte,/v.^: 1 l P . < .EL 


K icftjRft 


Uh 


1 - 

2 - 
) f 

h + 

5 + 

6 _ 

8 7 ' 
? 7 

ii* 
12 _ 
13 , 

lj + 
l U 

1*4 

1 4 
18 _ 
1? + 
20 , 
21 * 

22 _ 

23 + 
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2| + 
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sr - 

JJJt - anl "’ 5> at ■>*■*■ "lobsters" tocorr.T^u"*^ * 

insTfl started at D °2I»* Tne °nly wheel order that satltfit-o the 
r l,aUtion5 of "lobsters" in positions 10-11, ly-ift 2 0-'A * 29-30: 
<37-38 «« Wh3t W * WDuld *»*• called shUl order E21j 
rh *ss no*ber« were arbitrarily assigned when tne Green ^ chine was 

-olvsd -nd it was now certain that wheel 1 had 1, turnover., 

’ 1 $ and wheel 3, 11 turnovers, because Berlin had stated 
fl «gs 930 that the wheel order would be R 2 3 1. 


wheel 

in 


Figure hh was then examined for equidistant patterns and the 
flowing were selected for study. 


Position 

letter 


1 12 22 
f a o o 
Q F F F 


2 13 23 
E H H H 
H E E K 


This equidistant pattern was accepted as evidence that either 
tfftsel entry points FE and OH or FH and GE were wired to consecutive 
positions on the interior face of the wheels. Both situation® were 
examined as follows: 
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SET ULW 


. oairinga produced In columns 5, 4, 5 . 7 , 0, 10, 11, M, 

« 17 19, 20, *1* 25, 25, 26, 20, 8B # 8B # »» W* 

l5t nvrero striken out because of the known Wheel track end 
$tii ^triatl ons were examined for repeated pairing. The Ffc-flH 
both fl —.ant Indicated nothing significant twt the KH, OK arrange- 
^ffhowed the following* 

OE FH MF RD SW HT XR D3 WN QU TO EC CV ZI VY JO KP 
OE FH HD S»T HT DS ZI 

OE FH °3 


Tfc can be seen that the pairings RD, SW, HT, D6 and ZI, in 
t0 the OE, FH pairing already assumed, are repeated, 
addit re poated pairings were added to the OE, FH In the table 
Th0f?0 below and expanded to derive a complete sequence* 
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pairs 


Tha columns where turnovsre occurred 

rrom the table wore chained "* «d 

at rPB7Tif« n blowing sequence: 

" " J u 2 C V Y Q D 

f.hfl f. fVtA 


"U", 


---nuuBCVXQU 

Tt iras known that the core position of +w«» 
g0 if the plain component i a completed XH°? taid8 ,, ' heel w " 
aequence for wheel No. 1 will bef ou!Id W>$ the inner 

Core A A ^ K P B z 1 u p H ? o f R n o , „ , „ 

~ - TTTPvJS! ffNJGSCVI QU 

IUPYSETXOKHFDfeZRV 

WBiInI IPl,lGEXASW 

Y?iU GVZCiajKFYBTi 

FQPUGENRirMv^^ VHlNAaNKIGZCU l 
QRQVH?o?tmJ^ ,VIXBS0LJ H AB VZ 

u M » H F 0 S L N Z U D U I C T ? I' k t n v * i 

hsrv< t2qJS2 aveykzdu ^ hljcfyb 

JHQUNPBKTFZLAEVROUKDGIC 

VOvJCXOAUBFISPHLEHZD 

TQOMFIAE 

QSEZICODHYURPNGJBF 

YRTFAJDPEIZVSUOHKCG 

M E 


A L K P B Z 
BMLQCAJNO 
CNMRDBKOHJ 

donseclpik 

EPOTFDU^jl 

gen 

H F 0 
’A 

I T S X 
J U T Y K I R 
K VUZLJS 
LWVAMKTX 


New 

sequence 


0 

P 

Q 

R 

S 

T 

U 


WPRDYHBNCO.. . „ 

.8EZIC0DHIDSP 

jjXJBNUJniFAJDPEnn^oHK 
NTXCOMVZSUQBKEQFJA.‘/TRPILD 
0ZYDPNWATVHCLFRGKBX03QJ 
PAZEQOXBU alDUGSHLCYVTRKNF 

G l 
H ] 


PAZEQOXBU WIDUGSHLCYVTRKNF. 

QBAFRPYCVXJENHTIUDZWUSLOG 

RCBGSQZDWYKFOIUJNEAXVTUPH 

SDCHTRAEXZLGPJVKOFBYWUNQI 

TEDIUSBFYAMHQKWLPGCZXVORJ 

UFEJVTCGZBNIRLXH^HD A Y ti P S K 


This sequence was arbitrarily placed with “A" opposite rt A" 
to represent the wiring for wheel No. 1, thus: 

AYWPSKOUFEJVTCGZBNIRLAkQHD 
ABC DEFGHI JKLMNOPQRSTUV r/XYZ 

Yfirlng for the other wheels was recovered in the same manner 
as for the Green machine. The complete recovery was: 


3 


rDSBFSyj-XRPAYwvrn . „ 

A B 0 D B F 0 H I J K 1 K , 0 t q r S “ * ° I K H 

Hnai Hnrz 

AYWPSKOUFEJVTCOZBMTn 

ABODEFOHIJKLUNOPqrJJ^MHS 

AEPNZLIDVHj^TCAPRnan 
ABCDEFOHI JKLMNOP^^^^KS 

adyqbnule hwkpoxpvtzo t _ t 

ABCDEFaHIJKLMNOPQRSTUVWXYE 

d. REMOVAL OF THE TWIST 


There are 2 types of errors which may be exacted 
present in the recovery of "equivalent" whLl wirtn-a . 

(a) The wrong sequence of letters may be aerived. Consider 
the sequence placed on the Inaris^acT^f wheel TT o ' . ' ' 2: 


Recovered 
sequence : 
Equivalent 
sequence t 


AEPNZLI DVHJi7TCXFR0QBYMqUK3 

BF ^OAUJEWIKXUDYGSPHCZKRVLT 
CORPBNKFXJLYVEZHTQIDAOSWUU 

Z DOUYK HCUGIVSB rfE^HFAXLPTJR 

Any of the 25 other sequences which can be generated by com- 
pleting the standard alphabet below the recovered sequence would 
be an equivalent sequence and would work equally well, unless we 
insist that the wheels be twist free. It should be noted that, 
with the end wiring, bench mark and starting position of the wheel 
known, this type of error, i.e. recovery of the incorrect sequence 
of letters, does not occur in the case of the fast wheel. 

( h ) ihe sequence of letters, either correct or an equivalent, 
m «v be incorrectly Juxtaposed against the standard alphabet sequence 
Presenting the outer face of the wheel. #ith the end wiring, 
£Ph^k andltartlng position of th» wheel known, themlsplooo- 
^fnfSe ^eSel f the onljr tgje of eiTor IntxoduSJ^g- 

fast Steel recovery . 


Doth the (a) and (b) ten.. . 

ln the initial recede * the ^ ^ ^ 

Th® 2, 3, 1 wheel order nr ^ -oS. 

which were solvea, in which ** 1 used in tae SQr i „ * 
used in the encipherment ver^^ 31 * 11 ^ and °J oeEsa « e3 
were adjusted so that the Ti * 

OT re poaitlon Identified as «£*«. sei ^STSf 

The messages which T „ re 

Rings tellungen and Orundste-n,,! iTBd conta ined the entire n«* 

***; ??l? 0 that s>*^5E5j2f £ 

all following messages simply by folln^"* 16013 WQ could have read 

°y following the key instructions. 


I 


It was found, of cour., 

read, setting the Ringet.Hu Ag ^ th * *** 

ln ths »*»• »hael ord.r u th^ glnat z on .] ? »hl«h v. 

*-i **• «o«wrS. th * t u ** d i " tu £»«* •*> &S* 

^ fr ® Whl/Jh tha 


*• w%r * thow 

W frf » Whl/Jh tfu* 


' r, « whlflh t» 

Partly by trial «n d 

other wh^el order, with orlbriJJ" rUy ** •ohxtlon or 

“*» «*u Rss , .r.^. ■ N - 1 — *•* 


R 2 5 1 
Z Z 2 Z 


R 5 2 1 
Z E I z 


R 1 8 2 
Z P D I 


R 2 1 5 
Z Z A I 


Suppoa. « « r. 0OTW „ ^ f0Uo .^, 


R 8 1 2 

Z E E X 


R 2 8 1 
Z Z Z Z 


R 8 2 1 
Z E T Z 


R 1 2 8 
Z P T T 


We could recover the R R i o _-. 4 . 

some such reasoning u follows? w" ?? wh1 ^ h to set the rings by 
placed next to ~ m ?' W ® laicm that when wheel Ho. 8 ie 

^ refl * ctor tha ring setting, mat be placed 
•gainst ZE on th. oor. » w. o« say that w.VjTh^, 

R 8 1 2 
Z E 


and from the R 2 5 1 we can .ay that when wheel. 8 1 ere placed 
Z Z Z Z 

together in that order the ring a oust be set at the eie letter 
so that we have R 8 1 2 and from R 1 2 8 we can eay that when 
ZEE Z P T I 

wheels 1 2 are placed together ln that order the the difference be- 
tween the points on the core at which the ring settings are placed 
must be equal to the distance between "F" and "T". Since we al- 
ready have "E" for wheel 1, we can say our rings et ould be set 
R 5 1 2* The possible extensions of this procedure are apparent. 

Z E E X 

With the 6 conversions for the ring settings recovered it was corw 
wld«r«d desirable to remove the twist from the wheel, so that Ring- 
stellungen could be set at a constant point, i.e., •Z", on all 

wheels. 

This was accomplished by placing the fast wheel in the original 
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*"• * »« '->• .ti *“* «**■ ■* 

V* *or*U Vf/*, »•*•'% '-rr* f^i *«* b* Vr« 

,/f V*, Wh*,l, k}s/y% w’rUi*'? *'>■■* * tO. tfc* *Z* 

■«a ^ mi . .. ' /T * hx. r v . .-i . — _ , 


*■ w — — ^ r « «r /4 I/I 

^>•1 tls/ft '/f tfeft *W»i. -*7 ™ ~m ~ ■ — «* V" 

~t -*• M u Z *TS i*U\ " '*’* *•* »»l 

•*'•«) 'jr*Urr. tt^nm. «.,» T. 1 "* • K *W« ' li '« ! 1 ’. 

- 411 ~~ rt •' ■• v^==-* 


Is T«7 


. ? Ite y/rrvrt ;*«ltl/», *Z» twi still 

n*\ 1 ' *? '**■ f; *TO r » *V.., V, 4^ stertis* v*Lnr* «t the 

rj/»t w« «»«t ofeence the letterl/* on tbs Lx*r fsc* * 

U* Wheel V> the »s f ;«r»« #.nsn MLe*« 


C7IZ 4Tin0fJAMF?0LIIff IDH?3 
Xe* 


S+ffjmtn* - 


T !i h t Z ICOTIFIXLQIIOTCIFIIDJ 
ZiBCDIHHIJ ILMI0PQ1STTJ7WXT 

QWI I 7 Z U I0A8D?0BJ XPTXCTBIXL 


This of/rrtiim the Identity of the letters la the »yx«ct on 
Ue 1 aside of the wheel twt we prrtefcly still here it la the vror^ 
pawl tl *wu 


Zf # aow, we lasts t that the etc*, essence pees tharaa^h 

Wheel Uo. 1 «vl deliver the ser^enae CTDCWJ etc., » — her e on the 


1 


p X 
ru •-» 

ie »_) 

m a 

> a 

O .*! 
X M 
X « 
(V. Dr* 
X X 
-3 C/5 

a a 

CO W 

r*« >■ 
« x 
CO o 
•«: Tf 
O X 
M a 

CD CL, 
ISJ CD 

x s; 
a o 
w o 

V: EH 
Cf O 


o N 
a X 
TM 
31 te 
X X 
-) CD 
« Eh 
M 05 
» « 
cq or 
M a. 
C 3 O 

o a 

X 31 
> ^ 
“-3 x 
M *-s 
a H 
CD W 
O CO 
X ft, 
05 M 
CU Q 
t* O 
X PQ 
«< «JJ 


i -5 05 

M M M 

31 Eh 

o ^ 

a a 

3 ) t> * 

m n 

a m 

^ a 

o ^ ^ 

O -3 

N CO o 

X c> 

^ « X 

x a 

X 

a i-. 

fci CL, Q, 

v: -4 

-» O J*J 

o 

o a ^ 

a .. 

^ Cl a; 

CO a 

* a CO 

a 31 

** a a 

O •< 

W * 0 > Q 

CO CD 

lt 5 H 05 

• 4 ! CO 

x a 

o n 

Cd CO o 

M -3 

a ft, m 

CD a 

ra ro cd 

M X 

otq x 

Eh rf 

tH o X 

ttj N 

o m « 

W M 

X <■! W 

&s X 

PCS N p 

or o 

to X or 


«*5 


►4 o 

a x 

X 

a cl, 

or x 

a 

a co 

a tc 

a 

m i3 

x > 

a 

> a 

►a a 

> 

O H 

« X 

o 

X X 

M co 

X 

X 32 

2 ; a 

X 

D-, W 

m or 

a 

X or 

n a 

X 

-> H 

Cj o 

*"3 

a a 

o a 

a 

CO o 

x a 

o 

Pc a 

> P 

a 

o CO 

a X 

p 

CO N 

w a 

CO 

< a 

Pc H 

-< 

o > 

p a 

o 

H *3 

o o 

H 

a o 

X a 

a 

t4 X 

« "• 

tsi 

H X 

a a 

X 

a » 

[3 o 

a 

W -5 

{H CQ 

M 

is >* 

< < 


rt H 

P X 

r» 
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— * -rf/ 1 ri 

Till* ii*ii I ,m mu i 

# » plain* 1 , 1 , « f |, ' •"'l 1* ©on]*, 1 , ... 

•«* in-b Um * r,r -»' «*pir»tir "* »»f 'ti* 

QWKHT 7 . || t a i N 

'•'*Mrj» 0 Llwvwji , H7 

I, *J 101*1* 0 OlVUt 1 On^Hpil 1 , j" *"• 1 0 *n «Mt tha H«lr 
l.oard Uttar* Q'nxiWJV ato u , /* U<, *» u, * f ' u Wl»ir tha k* 7 - 
It l. pinking TWl/iKmi **. 'TrS^'rV ** t * r * V ' /r «t *«■ •*— **»• 
ln« dl a^rikri wlU make U, 1 . Ju. r ' flr,t follo*- 


Firot 

Separator •QWlHTZUIOAiDfOMJKPIXCVBWML 

Keyboard 

Lattar* —80 K K Z (j If R J MONAMPPOI. 1 NVWKDHT 


i-l BUBl «£.fl V MF 1 XLUHTQWIJAPK.D 
Whaal No.li 7. A nCDKFOHTJ KLMNOPQISTUVWXT 

i 

Ka/board -QWIJITZUIOASDFOHJ KPIXCVBWML 

It la apparant that If w* nn* dalivar tha CTIX7HUP aaquanca 
through whaal No. 1 wa will alao dalivar tha flrrt aaparatcr oa- 
quanoa ah own bal<wt 


1st Separator 

Lott «rai w L N K X D J 


V1JZ8BC RIQEHAIFMOPOT 


Keyboard 
La t tar at 


CTDONU PWYQQKVERSXFBIAHVLJ Z 


To dalivar tha aaqoanoa CXEZ<#...to tha daalrad point at tha 
fj rot aeparator wa m»at allda tha oorraotad lnnar sequence to tha 
poaltlon ah own by tha undarlinAd sequence In tha above Fl^ra. 


1 ng 


in 


as 


To remove the twist from wh*«i w « 

the action for this wheel in th. * 2 * We Prepare a ch »^ v, 

■ tM n»xt Interior position. Th£ ^sW^ 0 " ' Ith ^ STl 

111 Figure 1#6. 

Examination of Figure I^with 
for Figure 16 reveals that, to d2iv!T+u 0n8ideraitiona 
t0 the first separator, through wheel ?? sequence NGVRTT etc., 
oust re-letter the inner sequence as follows!” thS ^ P° sition » we 

N0VRITKEHDUMSFL3ZQ0CPATWJI 

HfrE ftfP a ? J I 'L H H 7 ” ^ T ^ 

n ij KLMN OPQRS T D VWI T 

QWERTZ UIOASDFOHJ KPYXCVBN1IL 

w ^* ee ^ No. 1 tc deliver the sequence of 
ietters IZUZGNxetc., to the second separator while wheel No. 1 is 
picking up TWI2JKX etc., from the first separator we see that we 
must place the sequence NGVRTT etc., against the first separator as 
follows* 


QWERTZ UIOASDFGHJ KPYXCVBNML 
A TWJ XNGVRIYKEHDUMSFLBZ QOC P 


This in turn requires the following placement of the corrected inner 
sequence of wheel No. 2 as follows: 

QWERTZUIOASDFGHJ KPYXCVBNML 
ATWJ XNOVRIYKEHDTJMSFLBZQOCP 


TDAOSWMTJCGRPBNKFXJ L I V E Z H T _Q 
Z A B C P E F G H I J K L M N 0 PQRSTUVWXY 

QWERTZ UIOASDFOHJ KPYXCVBNML 


To remove the twist from wheel No* 1 we prepare a chart for 
whPel in the fast position with the new twist free wheel No. 3 
JSthfErt interior portion. Thi. i. shorn. in Figure U7 . 

We examine this figure together with Figure U6, in which we 
gp Q that when wheel No. 3 is in the fast portion it picks up the 
kevboard sequence CXEZQT etc. We are required, then, to place the 
FWKX wheel No. 1 sequence against the first separator in such a 



ft Q 
t* o 
X tn 

■< < 
o N 

tC ft 

cr x 

* I* 

K t> 
ft CD 

a e-. 

M (O 

as cc 

PQ CT 
to a, 
a o 

o S5 

x a 

> i-» 

►a X 
w ft 
ft M 
ft a 
o o 
x ft 
co w 


•H X 

S ^ 

O'* 
a c» 

ft 

*»- 

S= » 

ft CD 

*» 

ft Eh 

OQ ft 


> «c 

O to 

ft 

[> 

O ft 

C2 K 


X u 


CJ 

X 

X O 
ft o 
X n 

ft a. 

►< o 

O Ss 

X 

ft 

X 

~D ft 

ft a 


SC M 

6e ft 

ft 

cc 

O ft 

-s ft 

o 

ft to 

tc ft 

ft 

« a 

> H 

ft 

CO CD 

o a: 

CO 

*< a 

ft a 

< 

O ft 

ft (x. 

o 

H ft 

tO W 

M 

ft x 

a o 

ft 

N ft 

ft o 

CO 

Eh ft 

H ft 

Eh 

ft ft 

C C 

PC 

W > 

02 to 
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6c e> 

ft X 

a 

CT ft 

ft ft 

Of 


CO 
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S3 H 

ft 

ft 

CTX 
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a 6c 
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ft > 
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ft 

ft ft 

s> 

X 

« ft 
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ft to 
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ft 

a a 
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w 

P3 of 
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O' 

CO ft 

X 
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o o 

•ft 

ft 

o a 

a 

o 

ft a 

o 

ft 

> ft 

ft 

to 

ft X 

o 

CO 

W ft 

CO 

ft 

ft H 

<J* 

> 

& a 

o 

•-a 

o o 

H 

Q 

X ft 

a 

X 

to w 

to 

X 

ft o 

X 

ft 

£ o 

a 

ft 

x m 

w 

£ 

«< «< 

► 

iH 

a n 
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4 

J 

( 

i 9 

y}J 

t /2 

fiU 


3 

M 
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»4 

• 1 ► » 
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►« 
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m 

M N 

M 

H 

SI 

S» 

M ► 

Si 

1* 

SI 

t*i 

II. ft» 
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Sl 

(- 

-4 S 

»• 

S' 

s> 
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u 

N 

u 
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► «n 

H 

in 
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l.‘ • IM 

►« 

SI 

H 
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►» ft 

*. 

i* 

a. 
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SI n, 
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s. 
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CKO 

*■» 
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►» 

(II 

*4 n 

SI 

SI 

SI 
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H M 
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SI 
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►. 

H M 

s. 
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s. 

a 
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a 

M 

a 

in 

W "» 
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r» 

St 

O 
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o o 
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o 
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s. 
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►1 M 

M 

M 

N 
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H 

O 


SI 
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SI 
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» * ■« * * ► 
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H S- 
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si n 
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h in 
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SB S3 
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o sr 
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CO ffl 
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way that a portion of the wn v™, T 

on the separator. Th.ia 8 ^ence 


( 3 ) 


sequence Tor^ £ i. C £ Q 

• 1 to the position IndlceieV'elii!' °" r 

S* HU Q 8 t. » i KPIICVBNUL 

~ Q s 0 J pdv tjtnzcn 

z ABC DEFQHIJKT XLQHYGVUAPKND 

Q HIJKLMNOPQRSTUV’ffXY 
OTWLNKXDJvn? FGHJKPYXCVBNML 

~ - * D > T V TT 7 S B C R I Q E H A Y F M G P 

Z ABCDEFp2!t EJ VTCGZBNIRLXMQ 

cdefghij klunopqrstuvi XI 

QWERTZUIOASDFGHJ kpyxcvbnml 

The twist free wirings for wheels 1, 2, 3 then are as follows: 

„ , DAYWPSKOUFEJVTCGZBNIRLXMQH 
No. 1 ABCDEFOHIJ KLMNOPQRSTUVWTYZ 

DAOSWMUC GRPBNKFXJ LYVEZHTQI 
No. 2 ABCDEFGHIJ KLMNOPQRSTUVIfXYZ 

TSBEZ RC OVMFIXLQHYOf UAPKUDJ 
No. 3 ABCDEFGHIJ KLMNOPQRSTHVlfXTZ 


( 1 ) 


The Umkehrwalze, it will be noted, was twist free 


PART II, 


3. ENICSOLt 


1. 


DETEittdliATION OF THE ITSF <y 

°“ “'SoiVED ciaotcS ■' 


. .wiJiS 


MULTIPLE TORHOVjt 


U-0 BERuIlWiaDItID 


About 5 'Ray, 19 l i ) l the h-O 

position. A aing le letter cease A using double trans- 
cation of the L03 Odds Test in count, followed by an appli- 

encipherment. Th_s was one’of'+K fied the new c l' stem as Enigma 
fications achieved bv the Qrm o tfte nos ^ successful system idanti- 

^ ^e employment of the Log Odds Test. 

An examination of fh** two-p-w 

messages from the same +. ran „ m f Af 1C on a 3in g ls da,,- revealed that 
in depth by «!f™ tttln8 a « ent superposed 

the oreanbl p on M u ^ tlrae ST° U P» For example, a message having 
lith n r 1 Lpherment time 11*10 would be in pirns e frS the 

message having the encipherment time il*00« 


This method of indication was similar to that previously 
encountered only in the Western Hemisphere, namely, in the >N 
group, Argentine-Eerlini a secret number, w'nicn changed daily, 
was aaded to the selected encipherment time; the machine was 
t.ien advanced that number of positions forward from the basic 
Grund established for the day. 


After determining the foregoing, the various Enigmas employ- 
ed by the Sicherheitsdienst group, of which U-0 was a part, were 
considered. There had been only four machines employed by tnis 
group — The Green, The Red, a combination of Red wheels and Green 
reflector, and the U machine. Since the Red and Green machines 
had the 11 - 15-17 turnover pattern plus the rotating reflector — 
which produces the ’’lobster" effect, a study was made of uhe 
chance lobsters and actual lobsters on both the stationary and 
rotating type reflectors. In the samples examined the non- 
lobstering machine produced a higher lobster count than the true 
rotating reflector. Hence it was concluded that a lobster count 
would not serve to distinguish between multiple and single turn- 
over machines. 


Assuming then, that the traffic was enciphored on one of 
the known machines, a considerable time was expended on guesses 
in depth— the depth of any series of messages vr us never enough 
to yield a solution on that method alone— then running menus 
on the sliding grenade and checking the resultant hits in the 
un cribbed depth. 


This net-hod eventually read the traffic in a cepth ©f 12 

3e33a£e3 * v ,I^! 138 2051 1,. t , ^-v 

su.cn excellent combinations as ZRDZ; QOLS; etc. These 

were easily expar.de d aid the full text recovered. ^z<Lsm 
involved employed tae Red wheels and the Ireer. reflector.* 


The plain text of these messages provider cribs welch were 
successfully used in the solution of a consiceraole to.vi of 
the remaining traffic. Seven of tne 12 messages bar the coriol- 
nation of letters XJJA_'y, followed by t.ne name of tea 
This crib appeared in the beginning of each message after s *'^ se 
or five-letter chinny word. The simple expedient of assu ring “this 
sane combination at the beginning of all messages , trer. running 
menus on the sliding grenades and checking the "bite", remted 
in reading over 90 £ of the traffic on hand* 


* The only instance known up to this time of a sac— 
using Red wheels and Sreen reflector was the case^o- ^ Z+*\r 
enciphered instructions for the Red machine when . “ r 

Argentiria. The Berlin message of 5 December, 19n>, *."-* 5 * 

got the machines mixed up here", was interpreted a,. ^ . 
meaning Berlin had mlauaed some one Janie 

vertently picking up a vrneel from a dL.a.erer. Ttaci±ats 

developed later, however, the statement ; •* 3°V nachine «> 
mixed up" probably meant, simply, that the wro^, 

used# 


part II, D. 


2. STUCK SR. U-I HAMBURQ-BORDEAUX 

to machine the chan - e the 

encipherments of unidenti fied^iSwT 77 3 ° lved ' ihlch were re ~ 
flhn i nlaln ^ " u “; UBn "- Ilecl cipher text traffic. These had a 

^nt indVt™ internal preamble giving a serial number, letter 
count, and a cover name to identify the enciphered traffic. 

An analysis the plain-text messages deciphered in the old 
system showed that some type of radio intercept activity was in- 
volve . ie message spoke of installing rhombic antennae, another 
spoke of guarding certain frequencies at specified times, and an- 
other gave the signal strength of radio intercepts. From this 
information it was deduced that the Bordeaux end of the H— I cir- 
cuit acted as a sort of monitoring and relay station which listened 
in to oertain out— stations for the Hamburg control and furnished 
Hamburg with the text of an out-station message in the event that 
Hamburg failed to receive it. 

The machine traffic was characterized by a three letter dou- 
bly enciphered indicator which appeared as the first six letters 
of the message. This was identified by the familiar throw-on ef- 
fect produced by double encipherment. A three letter indicator 
was unknown in Coast Guard experience with Enigma traffic. Fur- 
ther information about the machine was secured through a re-cipher 
on the part of Bordeaux. 10 groups of a message were sent; then 
the transmission was interrupted and a message was later sent 
■wVii rwneated the 10 groups with most of the letters being . denti- 

The 6 letters wb± ch were not identical were substituted in such 
a- to suggest that a stecker had been employed and that 
one or perhaps two wires had been Improperly plugged. The combin- 
ation of^stecker and the three letter indicator strongly sug- 
gested the German Service wheels. 

** n .yt step in the analysis was the identification of the 

the la£t days of the old hand system, 
shown to be the 2-C circuit, which was F.B.I. controlled, 
Thi ® !! New York and Hanfcurg. It was then possible by examining 
he a 71 i-nzths and transmission times to find days on which 

had re-enciphered the New York end of the 2-C by machine 
and relayed it to Hamburg. Message placements -were found by 


sliding strips of th* + 

York message of about 25o 252 16X13 acainst «ch other A ew 
approximately 6 0 letters against a h-lLaeag? 

whi^h produced no conflicts ° p* Unt ^ 1 a P°®ition was readied 
J;® 11 ^ 1 * f rib ‘ Solution was ^ro d 6n ^ C J P^oements supplied a 250 . 
the Bombe. The U-I lacHne^f^ 12131 of these cribe on 

2, 3 with the fixed Bruno r<>n be lbe ServiCG wheels 1, 

aruao re flector and stecker. 

-it k-r^TXi^^^ conditions under which dr- 
good cryptogranhi r ty*= ^ • 311 almost complete abandonment of 

highest security N ? t on ^ <& d the Germans use their 

the grundstelWs l ° r «“ tran «ait low grade traffic, but 

networks. Further™^ Y? re those employed on Spanish Abwehr 
were aware th a + Tv/V* there was ever y indication that the Germans 
encioherm!n+ ^ J5® New York <* r cuit was controlled; yet the re- 
mitted t+ • ^4 cl Pher text of this low grade traffic was per- 

i,. n7QYt ' Interesting to speculate as to why Oberinspek tor 

^nzer permitted the arrangement used in Circuit U-I. Further- 
more, xt is the only example known to this office of the Service 
machine being employed for clandestine traffic. 



*"Con *>roxxed M 
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